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The Space Shuttle is America’s newest and most versatile manned spacecraft. Unlike its predecessors-Mercury, Gemini, and 
Apollo—it is a reusable, aircraft-like ship which is designed for years of service and makes space flight a relatively economical and 

routine event. 

The Shuttle will provide a flexibility never before achieved in space operations; it will allow space to be treated as the resource it 
is, rather than as a hostile environment to be tested, examined, and explored. 

Shuttle will enable man to use hard vacuum and zero gravity for further development of material processing in space. Space 
flight has opened up this new environment which we have only begun to understand or take advantage of. 

Our earth-bound environment limits certain material processes. In almost all human activities and industrial processes, gravity is 
a dominant force; it constrains our motion, produces friction which must be overcome, and separates fluids. It causes layering in 
alloys, contamination in glasses, separation in chemicals, and defects in electronic materials. 

Experiments planned for Shuttle flights will explore the benefits of zero-gravity and hard vacuum. Actually a tiny gravitational 
attraction is present: 1/3000 to 1/6000 of what we experience on earth. Neither is the vacuum perfect; there is one-trillionth of an 
atmosphere. The findings to date from Apollo, Skylab, and Apollo-Soyuz Test Project missions have brought back materials 
fashioned in space that were more pure and uniform than anything made on earth-almost physically perfect. If we could develop 
materials to their full physical thermal, chemical, optical, and electric theoretical potential, major breakthroughs in medicine, 
electronics, energy, instrumentation, and construction could be achieved. The development of the Space Shuttle and Spacelab opens 
the door to routine work on commercially attractive material processes in space. 

The spacecraft’s large cargo capacity and relatively mild launch environment will enable it to carry into orbit a variety of 
satellites, including some which could not be launched before because of size, shape, weight, or sensitivity to launch forces. 

Malfunctioning satellites can be repaired in space by Shuttle crewmen or the satellite can be returned in the cargo bay for repair 
on earth. The Shuttle also could serve as a launch platform for higher-orbit satellites or for interplanetary craft. 

Eventually, the Shuttle can transoort elements of large space structures to orbit and support the construction crews in space. 
Such large structures could include satellite power systems, permanent space stations, multi-satellite service platforms, and orbiting 
space power stations. 

The potential of space is unlimited. 

A special NASA study team recently reviewed the U.S. space program and identified specific contributions to the welfare of 
mankind it could make in the next 25 years. These contributions-compiled in the team’s report, Outlook for Space -range from 
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weather and communications through manufacturing-processing 
to earth-oriented activities. In the last category, a grouping of 
contributions aimed at responding to “basic human needs,” the 
use of satellites and space laboratories was seen helping meet the 
following needs: 

• Food production, forestry management—Forecasting 
of global crop production and water availability, land 
use assessment, timber inventory, assessment of marine 
resources and rangeland. 

• Environmental protection-Large-scale weather fore¬ 
casting, climate prediction, weather modification 
experiments, stratospheric changes and effects, water 
quality monitoring, global marine weather forecasting. 

• Protection of life and property-Storm tracking, 
tropospheric pollutant monitoring, hazard forecasting, 
communication-navigation, earthquake prediction, 
control of harmful insects. 

• Energy and mineral exploration—Solar power relay to 
earth from satellite power stations, disposal of hazard¬ 
ous waste in space, world geologic atlas. 

• Information transfer-Domestic, intercontinental, and 
personal communications. 

• Use of space environment—Basic physics and 
chemistry, material science, commercial inorganic 
processing, biological material research, effects of 
gravity on terrestrial life, physiology and disease 
processes. 

• Earth science —Earth’s magnetic field, crustal 
dynamics, ocean interior and dynamics, dynamics and 


energetics of lower atmosphere, ionosphere- 
magnetosphere coupling, and structure, chemistry, and 
dynamics of stratosphere/mesosphere. 

SPACE SHUTTLE PROGRAM 

The Space Shuttle is being developed by the National 
Aeronautics and Space Administration. NASA will coordinate 
and manage the Space Transportation System (NASA’s name for 
the overall Shuttle program) through the 1980’s, including 
inter-governmental agency requirements and international and 
joint projects. NASA also oversees the launch and space flight 
requirements for civilian and commercial use. 

The Space Shuttle system consists of four primary ele¬ 
ments: an orbiter spacecraft, two solid-rocket boosters, an 
external tank to house fuel and oxidizer, and the three main 
engines. 

The orbiter is built by Rockwell International’s Downey, 
Calif., facility. This facility also has contractual responsibility for 
integration of the overall Space Transportation System. Both 
orbiter and integration contracts are under the direction of 
NASA’s Johnson Space Center (JSC) in Houston, Tex. 

The solid-rocket booster motors are built by the Wasatch 
Division of Thiokol Corp., the external tank by Martin Marietta 
Corp., and the Shuttle main engines by Rockwell’s Rocketdyne 
Division. These contracts are under the direction of NASA’s 
George C. Marshall Space Flight Center (MSFC) in Huntsville, Ala. 

SHUTTLE REQUIREMENTS 

The Shuttle will transport into near earth orbit 100 to 600 
nautical miles (115 to 690 statute miles) up to 29,484 kilograms 
(65,000 pounds) of cargo. This cargo (called payload) is carried 
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Solid Rocket Booster 
3.70 m (12.16 ft) Diameter 




Space Shuttle Statistics 
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Orbiter 

. . . . 68,040 kg (150,000 lb) Dry* 

SRB (2) 

. . . . 586,506 kg (1,293,0041b) Ea. 

ET 

. . . . 743,253 kg (1,638,5651b) 

SSME 

. . . . 1,668,000 Newtons (375,000 lb) 


Thrust Sea Level 


*Plus Payload and Consumables 


Weights Approximate 



6.37 m (20.9 ft) 
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in a bay 4.57 meters (15 feet) in diameter and 18 meters 
(60 feet) long. It can bring back from space cargo weighing a 
total of 14,515 kilograms (32,000 pounds). 

Major system requirements are that the orbiter and the two 
solid-rocket boosters be reusable, and that the orbiter have a 
160-hour turnaround time; that is, be ready to return to space 
160 hours (two weeks, based on 80-hour workweeks) after 
landing from the previous mission. 


Other features of the Shuttle: 

• The orbiter normally will carry a flight crew of three, 
plus four additional passengers. A total of 10 persons 
could be carried under emergency conditions. 

• The basic mission is seven days in space; with 
additional supplies, a 30-day mission is possible. 

• The crew compartment has a shirtsleeve environment, 
and the acceleration load is never greater than 3 g’s. 

• The Shuttle can be on launch pad standby for up to 24 
hours, and can be launched from standby within 2 
hours. 

• In its return to earth, the orbiter has a cross-range 
maneuvering capability of 1100 nautical miles (1265 
statute miles). 

The Shuttle is launched in an upright position, with thrust 
provided by the three main engines and the two solid-rocket 
boosters. After about two minutes, at an altitude of about 24 
nautical miles (28 miles), the two boosters are spent and are 
separated from the orbiter. They fall into the ocean at 
predetermined points and are recovered for reuse. 


The main engines continue firing for about eight minutes, 
cutting off at about 59 nautical miles (68 statute miles) altitude 
just before the craft is inserted into orbit. The external tank is 
separated. It follows a ballistic trajectory back into a remote area 
of the ocean but is not recovered. 

Two smaller liquid rocket engines (orbital maneuvering 
system) are used to put the orbiter into orbit, for maneuvers 
while in orbit, and for slowing the vehicle for reentry. The 
spacecraft’s velocity in orbit is about 7743 meters per second 
(25,405 feet per second); the deorbit velocity decrease is 91 
meters per second (300 feet per second). 

After reentry, the unpowered orbiter glides to earth and 
lands on a runway like an airplane. Normal touchdown speed is 
184 to 196 knots (213 to 226 mph). 

There are two launch sites for the Shuttle: Kennedy Space 
Center (KSC), Florida, and Vandenberg Air Force Base, 
California. The orbiter normally will land at the site from which 
it was launched. 


Basic Shuttle characteristics: 



Overall Shuttle 

Orbiter 

Length 

56.14 meters 

37.24 meters 


(184.2 ft) 

(122.2 ft) 

Height 

23.34 meters 

17.27 meters 


(76.6 ft) 

(56.67 ft) 

Wingspan 

— 

23.79 meters 

Approx, weight 
Gross liftoff 

2,041,200 kilograms 

(78.06 ft) 

Landing with 

(4.5 million pounds) 

96,163 kilograms 

payload 


(212,000 pounds) 
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Overall Shuttle 

Orbiter 

Thrust (sea level) 



Solid-rocket 

boosters 

12,889,200 Newtons 
(2.9 million pounds) 
of thrust each at 
sea level 


Orbiter main 
engines 


1,668,000 Newtons 
(375 thousand 
pounds) of thrust 
each at sea level 

Cargo bay: 



Length 

— 

18.28 meters 
(60 ft) 

Diameter 

— 

4.57 meters 
(15 ft) 


BACKGROUND AND STATUS 


On July 26, 1972, NASA selected Rockwell’s Space 
Transportation and Systems Group in Downey, Calif., as the 
industrial contractor for design, development, test, and evalua¬ 
tion (DDT&E) of the orbiter. The contract called for fabrication 
and testing of two orbiter spacecraft, a full-scale structural test 
article, and a main propulsion test article. The award followed 
years of NASA and Air Force studies on definition and feasibility 
of a reusable space transportation system. 

NASA previously (March 31, 1972) had selected Rockwell’s 
Rocketdyne Division to design and develop the Space Shuttle 
main engines. Contracts followed to Martin Marietta for the 
external tank (August 16, 1973) and Thiokol’s Wasatch Division 
for the solid-rocket boosters (June 27, 1974). 

In addition to the orbiter DDT&E contract, Rockwell’s 
Space Transportation and Systems Group was given contractual 
responsibility as industrial integrator for the overall Shuttle 
system. 


The first orbiter spacecraft, Enterprise (OV-orbiter 
vehicle-101), was rolled out on Sept. 17, 1976. On Jan. 31, 
1977, it was transported overland from Rockwell’s assembly 
facility at Palmdale, Calif., to the Dryden Flight Research Center 
at Edwards Air Force Base (36 miles) for the approach and 
landing test (ALT) program. 


The ALT program was conducted from February through 
November, 1977, and demonstrated that the orbiter could fly in 
the atmosphere and land as an airplane. The program consisted 
of: 


Five “captive” flights in which the orbiter, unmanned, 
was mounted atop a specifically modified 747 Shuttle 
carrier aircraft (SCA). 

Three manned captive flights in which two-man astro¬ 
naut crews operated the orbiter control systems. 

Five “free” flights, in which the orbiter was released 
from the SCA and maneuvered to a landing at 
Edwards. In the first four such flights the landing was 
on a dry lake bed; in the fifth, the landing was on 
Edwards’ main concrete runway under conditions 
simulating a return from space. The last two free 
flights were made without the tail cone, which is the 
spacecraft’s configuration during an actual landing 
from earth orbit. 


On March 13, 1978, the Enterprise was ferried atop the 
SCA to NASA’s Marshall Space Flight Center in Huntsville, Ala., 
to undergo a series of mated vertical ground vibration tests. 
These were completed in March, 1979. On April 10, 1979, the 
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Enterprise was ferried to the Kennedy Space Center, mated with 
the external tank and solid rocket boosters, and transported via 
the mobile launch platform to launch complex 39A. At launch 
complex 39A, the Enterprise served as a practice and launch 
complex fit check verification tool representing the flight 
vehicles. It was ferried back to NASA’s Dryden Research Center 
at Edwards AFB, CA, on August 16, 1979, and then returned 
overland to Rockwell’s Palmdale final assembly facility on 
October 30, 1979. Certain components were refurbished for 
use on flight vehicles being assembled at Palmdale. It will 
eventually be used as a practice and fit check verification tool at 
Vandenberg AFB. The Enterprise was built as a test vehicle and is 
not equipped for space flight. 

The second orbiter (OV-102), Columbia, was the first to fly 
into space. It was transported overland on March 8, 1979, from 
Palmdale to Edwards for mating atop the SCA and ferrying to 
Kennedy Space Center, Fla. It arrived at KSC on March 25, 1979 
to begin preparations for the first flight into space. 

Columbia will land at Edwards AFB in the initial 
development flight tests, with the last development flight landing 
on the concrete runway at Edwards AFB. 

The structural test article, after 11 months of extensive 
testing was modified at Rockwell’s final assembly facility at 
Palmdale to become the second orbiter available for operational 
missions. It is redesignated OV-099, the Challenger ,; 

The main propulsion test article (MPTA-098) consists of an 
orbiter aft fuselage, a truss arrangement which simulates the 
orbiter mid fuselage, and the Shuttle main propulsion system 
(three main engines and the external tank). This test structure 
is at the National Space Technology Laboratory in Mississippi. 
A series of static firings were conducted in 1978 through 1981 
in support of the first flight into space. 


NASA named the first four orbiter spacecraft 
after famous sailing ships. In the order they will 
become operational, they are: 

• Columbia (OV-102), after a sailing frigate 
launched in 1836, one of the first Navy 
ships to circumnavigate the globe. 
Columbia also was the name of the 
Apollo 11 command module which carried 
Neil Armstrong, Michael Collins, and 
Edward (Buzz) Aldrin on the first lunar 
landing mission, July 20, 1969. 

• Challenger (OV-099), also a Navy ship, 
which from 1872 to 1876 made a pro¬ 
longed exploration of the Atlantic and 
Pacific Oceans. It also was used in the 
Apollo program, for the Apollo 17 lunar 
module. 

• Discovery (OV-103), after two ships, Henry 
Hudson’s which in 1610-11 attempted to 
search for a northwest passage between 
Atlantic and Pacific oceans and instead 
discovered Hudson Bay, and Captain 
Cook’s which discovered the Hawaiian 
Islands and explored southern Alaska and 
western Canada. 

• Atlantis (OV-104), after a two-masted 
ketch operated for the Woods Hole Ocean¬ 
ographic Institute from 1930 to 1966, 
which traveled more than half a million 
miles in ocean research. 
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On Jan. 29, 1979, NASA contracted with Rockwell for the 
manufacture of two additional orbiters, OV-103 and OV-104 
(Discovery and Atlantis), conversion of the STA to space flight 
configuration ( Challenger ), and modification of Columbia from 
its developmental configuration to that required for operational 
flights. 

LAUNCH SITES 

During normal operations, Shuttle launchings will be from 
both KSC and the Western Test Range (Vandenberg AFB). 
Shuttle missions destined for equatorial orbital trajectories will 
be launched from KSC and those requiring polar orbital planes 
will be launched from WTR. 



Space Shuttle Launch Sites 


Orbital mechanics and the complexities of mission require¬ 
ments, plus safety and the possibility of infringement on foreign 
air and land space, prohibit polar orbit launches from KSC. 

KSC launches have an allowable path no less than 35 
degrees northeast and no greater than 120 degrees southeast. 
These are azimuth degree readings based on due east from KSC as 
90 degrees. 

A 35-degree azimuth launch places the spacecraft in an 
orbital inclination of 57 degrees. This means the spacecraft in its 
orbital trajectories around the earth will never exceed an earth 
latitude higher or lower than 57 degrees north or south of the 
equator. 

A launch path from KSC at an azimuth of 120 degrees will 
place spacecraft in an orbital inclination of 39 degrees (it will be 
above or below 39 degrees north or south of the equator). 

These two azimuths 35 and 120 degrees—represent the 
launch limits from KSC. Any azimuth angles further north or 
south would launch a spacecraft over a habitable land mass, 
adversely affect safety provisions for abort or vehicle separation 
conditions, or would be undesirable because of the possibility 
that the solid rocket boosters or external tank could land on 
foreign land or sea space. 

Launches from the Western Test Range have an allowable 
launch path suitable for polar insertions south, southwest, and 
southeast. 

The launch limits at WTR are 201 and 158 degrees. At a 
201 -degree launch azimuth, the spacecraft would be orbiting at a 
104-degree inclination. Zero degree would be due north of the 
launch site and the orbital trajectory would be within 14 degrees 
east or west of the north-south pole meridian. At a launch 
azimuth of 158 degrees, the spacecraft would be orbiting at a 
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70-degree inclination, the trajectory would be within 20 degrees 
east or west of the polar meridian. Similar to KSC, the WTR has 
allowable launch azimuths which do not pass over habitable areas 
or affect safety, abort, separation, and political considerations. 

Mission requirements and payload weight penalties also are 
major factors in selecting two launch sites. 

The earth rotates from west to east at a speed of 
approximately 900 nautical miles per hour (1035 miles per 
hour). A launch to the east uses the earth’s rotation somewhat as 
a springboard. This means, for example, that the Shuttle can 
carry a 29,484-kilogram (65,000-pound) payload from a KSC 
launch, but only 18,144 kilograms (40,000 pounds) with a 
launch inclination of 90 degrees from WTR. Incidentally, the 
earth’s rotational rate is also the reason the orbiter has a 
cross-range capability of 1100 nautical miles (1265 statute 
miles) to provide the abort once around (AOA) capability in 
polar orbit launches. 

Attempting to launch and place a spacecraft in polar orbit 
from KSC to avoid habitable land mass would be uneconomical 
because the Shuttle’s payload would be reduced severely-down 
to 7711 kilograms (17,000 pounds). A northerly launch into 
polar orbit 8 to 20 degrees azimuth-would necessitate a path 
over a land mass, and most safety, abort, and political constraints 
would have to be waived. This prohibits polar orbit launches 
from KSC. 

The following orbital insertion inclinations and payload 
weights exemplify the Shuttle’s capabilities: 

1. Equatorial orbit from KSC (for low earth orbit, 
geosynchronous orbit, or interplanetary escape)-at an 
orbital inclination of 28.5 degrees from KSC, maxi¬ 
mum payload weight is 29,484 kilograms (65,000 
pounds); at an inclination of 57 degrees, maximum 
payload weight is 25,855 kilograms (57,000 pounds). 


2. Polar orbit from WTR-at an orbital inclination of 90 
degrees, maximum payload weight is 18,144 kilograms 
(40,000 pounds) or 14,515 kilograms (32,000 pounds) 
at an inclination of 104 degrees. 

MISSION PROFILE 

In the launch configuration, the orbiter and two 
solid-rocket boosters are attached to the external tank and all are 
in a vertical position (nose up) on the launch pad. Each 
solid-rocket booster is attached at its aft skirt to the mobile 
launch platform by four bolts. 

Emergency exit for the flight crew while on the launch pad 
up to 30 seconds prior to liftoff is by slide wire. There are five 
365-meter (1200-foot) slide wires, each with one basket. Each 
basket is designed to carry normally two persons but could 
handle three. The baskets, 1.5 meters (5 feet) in diameter and 
1,066 millimeters (42 inches) deep, are suspended beneath the 
slide mechanism by four cables. The slide wires carry the baskets 
to a bunker at ground level. The bunker is designed to protect 
personnel even from an explosion on the launch pad. 

At launch, the three Shuttle main engines—fed liquid 
hydrogen fuel and liquid oxygen oxidizer from the external 
tank—are ignited first. When it has been verified that the engines 
are operating at the proper thrust level, a signal is sent to ignite 
the solid-rocket boosters. At the proper thrust-to-weight ratio, 
initiators (small explosives) at the eight holddown bolts are fired 
to release the Shuttle for liftoff. All this takes only a few 
seconds. 

Maximum dynamic pressure (max q) is reached early in the 
ascent, nominally at 10,241 meters (33,600 feet) about 60 
seconds after liftoff. 

Approximately a minute later (two minutes into the ascent 
phase), the two solid-rocket boosters have consumed their 
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Shuttle Mission Profile 


ORBITAL 

OPERATIONS 

Mission from 7 to 30 days; 
100 to 600 nmi (115 to 
690 miles) orbits; 7,743 
m/s (25,405 f/s, 17,321 
m/h) 


Altitude: 24 nmi (28 miles); 
velocity: 1,383 m/s 
(4,538 f/s, 3,094 m/h) 

2 minutes after launch 


DEORBIT 


Velocity decreased nominal 
91 m/s (300 f/s, 204 m/h) 
from earth orbit operations 


m/s = meters per second m/h = miles per hour 


MAIN ENGINE 
CUTOFF,EXTERNAL 
TANK SEPARATION 

Altitude: 59 nmi 
(68 miles); velocity: 7,796 
m/s (25,581) f/s, 17,440 
m/h) about 8 minutes 
after launch (just before 
orbit insertion) 


ORBIT INSERTION 
AND CIRCULARIZATION 


Altitude varies 
according to 
mission 


SRB SEPARATION 


f/s = feet per second 


Touchdown speed 
LANDING 184 to 196 knots 
(213 to 226 m/h) 


LAUNCH 


Maximum dynamic 
pressure at 10,241 meters 
(33,600 ft); about 60 
seconds after launch 
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propellant and are jettisoned from the external tank. This is 
triggered by a separation signal from the orbiter. 

The boosters briefly continue to ascend, while small motors 
fire to carry them away from the Shuttle. The boosters then turn 
and descend, and at a predetermined altitude, parachutes are 
deployed to decelerate them for a safe splashdown in the ocean. 
Splashdown will occur approximately 141 nautical miles (162 
statute miles) from the launch site. The boosters are recovered 
and reused. 

Meanwhile, the orbiter and external tank continue to 
ascend, using the thrus^ of the three main engines. Approxi¬ 
mately eight minutes! after launch and just short of orbital 
velocity, the three engines are shut down (main engine cutoff- 
MECO) and the external tank is jettisoned on command from the 
orbiter. 

The external tank continues on a ballistic trajectory and 
enters the atmosphere, where it disintegrates. Its projected 
impact is in the Indian Ocean, in the case of equatorial orbits 
(KSC launch), and in the extreme southern Pacific Ocean, in the 
case of WTR launch. 

Two orbital maneuvering systems (OMS) at the aft end of 
the orbiter are used in a two-step firing, to complete insertion 
into earth orbit, and to circularize the spacecraft’s orbit. Forward 
and aft reaction control system (RCS) thrusters provide attitude 
control (pitch, yaw, and roll) of the orbiter, as well as any minor 
translation maneuvers along a given axis. The orbiter is designed 
to operate in earth orbit between 100 to 600 nautical miles (115 
to 690 statute miles). 

At completion of the orbital operations (from 1 to 30 
days), the orbiter is oriented to a tail-first attitude. The two OMS 
engines are then used to slow the vehicle for deorbit. 


The RCS thrusters then turn the orbiter nose forward for 
entry. These thrusters continue to control the orbiter until 
atmospheric density is sufficient for the pitch and roll aero¬ 
dynamic control surfaces to become effective. 

Entry is considered to occur at 121,920 meters (400,000 
feet) altitude approximately 4400 nautical miles (5063 statute 
miles) from the landing site and at approximately 7620 meters 
per second (25,000 feet per second) velocity. 

At 121,920 meters the spacecraft is maneuvered to zero 
degrees roll and yaw (wings level) and a predetermined angle of 
attack for entry. (In the initial development flights, the angle of 
attack is 40 degrees; in later flights, it will be between 28 degrees 
and 38 degrees.) The flight control system issues the commands 
to roll, pitch, and yaw RCS jets for rate damping. 

The forward RCS jets are inhibited at 121,920 meters, and 
the aft RCS jets maneuver the spacecraft until a dynamic 
pressure of 0.929 meters squared (10 pounds per square foot) is 
sensed, which is when the orbiter’s ailerons become effective. 
The aft RCS roll jets are then deactivated. At a dynamic pressure 
of 1.8 meters squared (20 pounds per square foot), the orbiter’s 
elevators become active and the aft RCS pitch jets are 
deactivated. The orbiter’s speed brake is used below Mach 10 to 
induce a more positive downward elevator trim deflection. At 
Mach 3.5, the rudder becomes activated and the aft RCS yaw jets 
are deactivated at 13,716 meters (45.000 feet). 


Entry guidance must dissipate the tremendous amount of 
energy the orbiter posseses when it enters the earth’s atmosphere 
to assure that the orbiter does not either burn up (entry angle 
too steep) or skip out of the atmosphere (entry angle too 
shallow) and that the orbiter is properly positioned to reach the 
desired touchdown point. 
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During entry, energy is dissipated by the atmospheric drag 
on the orbiter’s surface. Higher atmospheric drag levels enable 
faster energy dissipation with a steeper trajectory. Normally, the 
angle of attack and roll angle enable the atmospheric drag of any 
flight vehicle to be controlled. However, for the orbiter, angle of 
attack was rejected because it creates surface temperatures above 
the design specification. The angle of attack schedule used during 
entry is loaded into the orbiter computer as a function of relative 
velocity, leaving roll angle for energy control. Increasing the roll 
angle decreases the vertical component of lift, causing a higher 
sink rate and energy dissipation rate. Increasing the roll rate does 
raise the surface temperature of the orbiter, but not nearly as 
drastically as an equal angle of attack command. 

If the orbiter is low on energy (current range-to-go much 
greater than nominal at current velocity) entry guidance will 
command lower than nominal drag levels. If the orbiter has too 
much energy (current range-to-go much less than nominal at the 
current velocity), entry guidance will command higher than 
nominal drag levels to dissipate the extra energy. 

Roll angle is used to control cross-range. Azimuth error is 
the angle between the plane containing the orbiter’s position 
vector and the heading alignment cylinder tangency point and 
the plane containing the orbiter’s position vector and velocity 
vector. When the azimuth error exceeds a computer-loaded 
number, the orbiter’s roll angle is reversed. 

Thus, descent rate and down ranging are controlled by bank 
angle. The steeper the bank angle, the greater the descent rate 
and the greater the drag; conversely, the minimum drag attitude 
is wings level. Cross-range is controlled by bank reversals. 

The entry thermal control phase is designed to keep the 
backface temperatures within the design limits. A constant 
heating rate is established until below 5791 meters per second 
(19,000 feet per second). 


The equilibrium glide phase shifts the orbiter from the 
rapidly increasing drag levels of the temperature control phase to 
the constant drag level of the constant drag phase. The 
equilibrium glide flight is defined as flight in which the flight 
path angle, the angle between the local horizontal and the local 
velocity vector, remains constant. Equilibrium glide flight pro¬ 
vides the maximum downrange capability. It lasts until the drag 
acceleration reaches 33 feet per second squared. 

The constant drag phase begins at that point. In the 
development flight the angle of attack is initially 40 degrees but 
it begins to ramp down in this phase to approximately 36 degrees 
by the end of this phase. 

The transition phase is where the angle of attack continues 
to ramp down, reaching the approximately 14-degree angle of 
attack at the entry terminal area energy management (TAEM) 
interface, approximately 25,298 meters (83,000 feet) altitude, 
762 meters per second (2500 feet per second), Mach 2.5, and 52 
nautical miles (59 statute miles) from the landing runway. 
Control is then transferred to TAEM guidance. 

During the entry phases described, the orbiter’s roll com¬ 
mands keep the orbiter on the drag profile and control 
crossrange. 

TAEM guidance steers the orbiter to the nearest of two 
heading alignment cylinders (HAC’s) whose radii are 5480 meters 
(18,000 feet), which are located tangent to and on either side of 
the runway centerline on the approach end. In TAEM guidance, 
excess energy is dissipated with an S turn and the speed brake 
can be utilized to modify drag, L/D (lift/drag) ratio, and flight 
path angle in high energy conditions. This increases the ground 
track range as the orbiter turns away from the nearest HAC until 
sufficient energy is dissipated to allow a normal approach and 
landing guidance phase capture, which begins at 3048 meters 
(10,000 feet) altitude. The orbiter also can be flown near the 
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velocity for maximum lift over drag or wings level for the range 
stretch case. The spacecraft slows to subsonic velocity at 
approximately 14,935 meters (49,000 feet) altitude, about 22 
nautical miles (25.3 statute miles) from the landing site. 

At TAEM acquisition, the orbiter is turned until it is aimed 
at a point tangent to the nearest HAC and continues until it 
reaches the point, WP-1 (way point one). At WP-1, the TAEM 
heading alignment phase begins. The HAC is followed until 
landing runway alignment plus or minus 20 degrees has been 
achieved. In the TAEM prefinal phase, the orbiter leaves the 
HAC, pitches down to acquire the steep glide slope, increases 
airspeed, and banks to acquire the runway centerline and 
continues until on the runway centerline, on the outer glide 
slope, and on airspeed. The approach and landing guidance phase 
begins with the completion of the TAEM prefinal phase and ends 
when the spacecraft comes to a complete stop on the runway. 

The approach and landing trajectory capture phase begins at 
the TAEM interface and continues to guidance lock on to the 
steep outer glide slope. The approach and landing phase begins at 
about 3048 meters (10,000 feet) altitude at an equivalent air 
speed (EAS) of 290 plus or minus 12 knots, 6.9 nautical miles 
(7.9 statute miles) from touchdown. Autoland guidance is 
initiated at this point to guide the orbiter to the minus 20° glide 
slope (which is over seven times that of a commercial airliner’s 
approach) aimed at a target 0.86 nautical mile (one statute mile) 
in front of the runway. The spacecraft speedbrake is positioned 
to hold the proper velocity. The descent rate in the later portion 
of TAEM and approach and landing is greater than 3048 meters 
(10,000 feet) per minute (approximately 20 times higher rate of 
descent than a commercial airliner’s standard three-degree instru¬ 
ment approach angle). 

At 533 meters (1750 feet) above ground level, a pre-flare 
maneuver is started to position the spacecraft for a 1.5-degree 
glideslope in preparation for landing with the speed brake 


positioned as required. The flight crew deploys the landing gear 
at this point. 

The final phase reduces the sink rate of the spacecraft to 
less than 2.7 meters per second (9 feet per second). Touchdown 
occurs approximately 762 meters (2500 feet) past the runway 
threshold at a speed of 184 to 196 knots (213 to 226 mph). 

ABORTS 

The Shuttle has three abort alternatives, depending on when 
it becomes necessary. These are to return to launch site (RTLS), 
abort once around (AOA), and to abort to orbit (ATO). 

RETURN TO LAUNCH SITE. This mode will be used in 
the event of a main engine failure between liftoff and the point 
at which the next abort mode (AOA) is available. RTLS will not 
begin until the solid-rocket boosters complete their normal 
thrusting period and are jettisoned, as in a normal ascent. 

The Space Shuttle (orbiter and external tank) continues to 
thrust down range, with the two remaining main engines, the two 
OMS, and the four aft +X RCS thrusters firing, until the 
remaining propellant for the main engines equals the amount 
required to reverse the direction of flight. 

A pitch-around (plus pitch) maneuver is then performed at 
approximately 5 degrees per second; this places the orbiter and 
external tank in a “heads-up” attitude, pointing back toward the 
launch site. Main engine cutoff is commanded when altitude, 
attitude, flight path angle, heading, weight, and velocity/range 
conditions combine for acceptable orbiter-external tank separa¬ 
tion [tank impact no closer than 24 nautical miles (28 statute 
miles) from the U.S. coast] and orbiter glides to the launch site 
runway. 

ABORT ONCE AROUND. This mode will be used from 
approximately two minutes after normal solid-rocket booster 
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Abort and Normal Mission Profile 
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Typical RTLS Abort Profile 


separation to the point at which the abort-to-orbit mode 
becomes available. Again, this abort would occur in the event of 
a main engine failure. 

The Space Shuttle vehicle continues to thrust with the 
remaining main engines and the OMS and aft RCS +X thrusters. 
In the initial development flights the OMS and aft RCS +X 
thrusters will not be used before MECO. The OMS and RCS 
thrusting periods terminate when the amount of propellant 
remaining in these two systems will support two OMS thrusting 
periods after MECO. 

Main engine cutoff is followed by jettisoning of the external 
tank. The OMS thrusters are fired after jettisoning the external 


tank to obtain an apogee of an intermediate orbit. The second 
tiring of the OMS places the spacecraft into a suborbital coast 
phase and “free return” orbit for the desired entry interface. The 
flight conditions—range, flight path angle, headings, and 
velocity—at entry resulting from this orbit will enable the orbiter 
to glide to the landing site runway. 

ABORT TO ORBIT. This mode begins after the AOA point 
is passed and also would occur in the event of a main engine 
failure. The Space Shuttle continues to thrust with the remaining 
main engines to main engine cutoff and external tank jettisoning. 
The OMS thrusters fire twice, to insert the orbiter into orbit and 
then to circularize the orbit. The orbit coast time altitude and 
the coast time before the deorbit maneuver depend on when the 
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abort was initiated and the mission. Alternate missions may be 
planned in case of an ATO orbit. The deorbit, entry, and landing 
would be similar to a normal mission. 

ORBITER GROUND TURNAROUND 

NASA’s Kennedy Space Center, Fla., is responsible for 
orbiter recovery ground operations at all primary and 
contingency landing sites. In addition to the prime sites at 
Edwards Air Force Base, Calif., and the Kennedy Space Center, 
Fla., KSC recovery operations are responsible for landing 
activities at contingency sites at Northrup Strip, White Sands, 
New Mexico; ROTA Naval Air Station, Spain; Kadena Air Force 
Base, Okinawa, and Hickam Air Force Base, Hawaii. 

The first four flights of the Columbia will land at Edwards 
Air Force Base, Calif. The fifth and subsequent flights are 
scheduled to land at the Kennedy Space Center. 

The spacecraft recovery operations at Edwards Air Force 
Base will be supported by approximately 160 Kennedy Space 
Center team members. Ground team members wearing self 
contained atmospheric protective ensemble (SCAPE) suits that 
protect them from toxic chemicals will approach the spacecraft 
as soon as it stops rolling. The ground team members will take 
sensor measurements to insure the atmosphere in the vicinity of 
the spacecraft is not explosive. In the event of propellant leaks, a 
wind machine truck carrying a large fan will be moved into the 
area to create a turbulent air flow that will break up gas 
concentrations and reduce the potential for an explosion. 

An air conditioning purge unit is attached to the orbiter so 
cool air can be directed through the orbiter’s aft fuselage, 
payload bay, forward fuselage, wings, vertical stabilizer, and 
orbital maneuvering system/reaction control system pods to 
dissipate the heat of entry. This heat, if not dissipated, will 
“soak” to the orbiter systems within 15 minutes of landing. 


A second ground cooling unit is connected to the spacecraft 
Freon coolant loops to provide cooling for the flight crew and 
avionics during post landing and system checks. The spacecraft 
fuel cells remain powered up at this time. The flight crew will 
then exit the spacecraft and a ground crew will power down the 
spacecraft. 

Within one to two hours the spacecraft and ground support 
equipment convoy will be ready to move the spacecraft to the 
service area at NASA’s Dryden Flight Research Center at 
Edwards. After detailed inspection and preparations at DFRC, 
the Columbia is ferried atop the Shuttle Carrier Aircraft to the 
Kennedy Space Center. 

When the spacecraft lands and completes its runout at the 
Kennedy Space Center, the same procedures as at Edwards 
Air Force Base are accomplished, with the exception being that 
it is expected that only one hour will be required before the 
spacecraft and convoy is ready to move to the Orbiter Processing 
Facility (OPF). 

In later missions, the orbiter must be refurbished and 
readied for another launch within 160 hours (14 working days). 
This short turnaround decreases the maintenance cost (part of 
the cost per flight), decreases the number of orbiters and support 
elements needed, and increases the utilization rate of each 
orbiter. 

The spacecraft is towed to the Orbiter Processing Facility 
where it is safed (fuel and oxidizer systems drained, tanks 
purged, and ordnance removed). The OMS and RCS pods are 
removed and reinstalled, if required, and other vehicle 
maintenance performed. The payload is then installed and 
spacecraft functioning verified. Activity in the OPF will take 
about 96 hours. 
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The spacecraft is then towed to the Vehicle Assembly 
Budding (VAB), and mated to the external tank. These elements 
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were stacked and mated on the mobile launch platform while the 
orbiter was being refurbished. Shuttle connections and the 
integrated vehicle are checked and ordnance is installed. Activity 
in the VAB is scheduled for about 39 hours. 

The mobile launch platform moves the entire Space Shuttle 
system on four crawlers to the launch pad, where connections are 
made and servicing, checkout, and pre-launch activities are 
conducted. This takes about 24 hours. 

The Space Shuttle is then ready for launch within 
two hours. 

In the event of a landing at an alternate site, a crew of about 
eight team members will move to the landing site to assist the 
astronaut crew in preparing the orbiter for loading aboard the 
Shuttle Carrier Aircraft for transport back to the Kennedy Space 
Center. If the landing is outside the U.S., personnel at the 
contingency landing sites will be provided minimum training on 
safe handling of the orbiter with emphasis on crash rescue 
training, how to tow the orbiter to a safe area, and prevention of 
propellant contamination. 

Space Shuttle flights from the Western Test Range, Calif., 
will utilize the Vandenberg Launch Facility (SL6) which was 
built for but never used for the manned orbital laboratory 


program. This facility will be modified for Space Transportation 
System use. 

The runway at Vandenberg will be strengthened and 
lengthened from 2,438 meters (8,000 feet) to 3,657 meters 
(12,000 feet) to accommodate the orbiter returning from space. 

Shuttle buildup at Vandenberg will differ from the NASA 
Kennedy Space Center plan in that the integration-on-pad 
technique will be employed. Solid rocket boosters will start 
on-the-pad buildup followed by the external tank. The orbiter 
will then be mated to the external tank. 

The orbiter maintenance and checkout facility at 
Vandenberg will be used for orbiter processing. It will also 
provide an area for processing security classified payloads. 
SL6 includes the launch mount, access tower, mobile service 
tower, launch control tower, payload preparation room, payload 
changeout room, solid rocket booster refurbishment facility, 
solid rocket booster disassembly facility and liquid hydrogen and 
liquid oxygen storage tanks. 

A future liquid propellant thrust augmentation system 
which will use storable propellants will require some 
modification to the pad to facilitate loading of propellants. The 
launch processing system will be similar to the one at the 
Kennedy Space Center. 


PAYLOADS 


The Space Shuttle is a transportation system. What it carries 
to earth orbit and back is its reason for existence. The Shuttle 
orbiter’s 18.28-meter-long (60-foot) cargo bay will take hundreds 
of payloads into space. 


All of NASA’s centers are vitally concerned with the 
Shuttle’s payload capabilities. In the first 11 years of operation 
through 1991, more than 400 Shuttle missions will be flown, 
each carrying one or more payloads. Estimates are that nearly 
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Ground Turnaround Sequence 
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every federal agency—as well as universities, the scientific 
community, and private industry—will have Shuttle payloads 
during the rest of this century. 

Payloads already scheduled to be carried aboard the orbiter 
include the Tracking and Data Relay Satellites, communications 
and weather satellites, Spacelab, Department of Defense 
non-weapon military payloads, the Space Telescope, 
multi-mission modular spacecraft, Long Duration Exposure 
Facility. The Department of Defense will total about 25 percent 
of the Shuttle missions. 

Satellites that require high orbital altitudes will be carried 
aboard the orbiter with a spinning solid upper stage (SSUS) or 
other type of booster stage. The satellite and upper stage will be 
deployed together from the payload bay, and the upper stage 
used to boost the satellite to the required orbit. Weather, 
communication, and navigation satellites, as well as deep space 
probes, would require upper stages. 

PAYLOAD DEPLOYMENT AND RETRIEVAL SYSTEM 

The remote manipulator system (RMS) is the mechanical 
arm portion of the payload deployment and retrieval system 
(PDRS) that maneuvers a payload from the payload bay to its 
deployment position and then releases it. It can also grapple a 
free-flying payload, maneuver it to the payload bay, and berth it. 

The basic RMS configuration consists of a manipulator arm, 
an RMS display and control panel (including rotation and 
translation hand controls), and a manipulator controller interface 
unit which interfaces with the orbiter computer. Most missions 
will require only one manipulator arm, which normally will be 
installed on the port (left) side longeron of the orbiter payload 
bay. It also can be installed on the starboard (right) side if 
needed. A two-arm installation also can be used. 


When both manipulator arms are installed, they can be 
operated only one at a time, since only a single software package 
(computer programs) and a single set of display and control panel 
hardware are provided. The fifth onboard computer controls the 
RMS. The RMS takes up 32 percent of the CPU (computer 
processor unit) in the one computer for RMS operation and 
30 percent for manual augmented operation. Wiring is in the aft 
station for both RMS’s. 

The manipulator arm is 15 meters, 76.2 millimeters (50 feet, 
3 inches) in length, 381 millimeters (15 inches) in diameter, and 
has six degrees of freedom. In conjunction with handling aids, it 
can remove and install a 4.5-meter (15-foot diameter), 18-meter 
(60-foot) long, 29,484-kilogram (65,000-pound) payload. The 
arm weight is 410 kilograms (905 pounds) and the total system 
weight is 450 kilograms (994 pounds). The RMS will rotate 
31.36 degrees towards the payload bay doors when opened and 
rotates 31.36 degrees towards the payload bay so the payload 
bay doors can be closed. 

The RMS arm consists of joint housings, electronics 
housing, arm booms, and shoulder brace. There are two booms: 
the upper, which connects the shoulder and elbow joints, and the 
lower, which connects the elbow and wrist joints. The booms are 
made of graphite/epoxy, 330 millimeters (13 inches) in diameter, 
by 5 meters (17 feet) and 6 meters (20 feet) respectively, 
attached by metallic joints. The composite weight in one arm is 
42 kilograms (93 pounds). The joint and electronic housings are 
made of aluminum alloy. A shoulder brace, used only during 
launch, minimizes high pitch axis moment loading on the 
shoulder pitch gear train. The shoulder brace is unlatched by a 
switch located on the aft flight deck display and control panel. 

The RMS can operate with standard or special-purpose end 
effectors. The standard end effector can grapple a payload, keep 
it rigidly attached as long as required, and then release it. 
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Special-purpose end effectors will be designed by payload 
developers. They can be installed instead of the standard end 
effector during ground turnaround or be grappled and released 
by the standard end effector in orbit. The special-purpose end 
effector will receive electrical power through a connector located 
in the standard end effector. 


The standard end effector has two functions: capture/ 
release and rigidize/derigidize. Capture/release is accomplished 
by rotating an inner cage assembly containing three wire snares 
to open and close around the payload-mounted standard grapple 
fixture. A switch on the back of the RMS rotation hand control 
(RHC) commands capture or release. Rigidize/derigidize is 
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accomplished by drawing the snare assembly into the rear of the 
end effector or moving the snares forward toward the open end 
of the effector. In the automatic mode, rigidization is automatic; 
when manually operated, a switch on the aft flight deck station 
display and control panel is used to rigidize or derigidize the 
effector. 

The end effector generates six data signals corresponding to 
the following indications: snares fully open, snares fully closed, 
payload present, carriage fully extended, maximum tension level 
crossed, and zero tension crossed. 

The arm has provisions for a closed-circuit TV camera and a 
viewing light on the wrist section, as well as closed-circuit TV 
camera and a pan and a tilt unit at the elbow lower arm 
transition. 

The RMS operator controls arm position and attitude by 
viewing it through the aft or overhead windows at the aft flight 
deck station, as well as by using closed-circuit TV from both the 
arm and payload-bay-mounted cameras. Two closed-circuit TV 
monitors at the aft flight deck station have split-screen 
capability. 

The RMS has both passive and active thermal control 
systems. The passive system consists of multilayer insulation 
blankets and thermal coatings. The active system consists of 26 
heaters on each arm that supply 520 watts of power at 28 vdc. 
The heater system uses redundant buses on each arm, so if a 
failure occurs on one, the other is capable of supplying full 
heater power. The heaters operate automatically to maintain the 
temperature within the joints above -25°C (-14°F). Heater 
circuits are individually switched off as the corresponding 
temperature reaches 0°C (32°F). Twelve temperature thermisters 
per arm monitor the temperatures, which can be displayed at the 
aft flight deck station. 
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RMS Rotation Hand Control Switches 

Every joint of the arm is driven electromechanically. The 
joint drive train consists of a dc drive motor providing joint 
actuation, an output gear train that controls output speeds from 
the motor input, an optical encoder on the gearbox output shaft, 
and a mechanical brake on the motor output shaft. 

The end effector drive train consists of a dc drive motor, a 
brake and clutch associated with the snare system, brake and 
clutch associated with the rigidization carriage and a differential 
unit. A spring mechanism is used for backup release. 

The joint motor tachometers are the prime means of motion 
sensing, augmented by optical encoders. Tachometer data is 
supplied to control algorithms, which convert input drive com¬ 
mands to an output rate demand resolved for each joint of the 
arm. The algorithms output this rate demand within limits 
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defined according to arm and individual joint loading conditions 
present at the time of computation. The algorithms supply the 
rate demand to control either end effector speed or position. The 
maximum attainable commanded velocity for the end effector 
and individual joints is limited by arm loading conditions, as is 
the maximum torque that can be applied to an individual joint 
under certain conditions. The aspect of arm control is provided 
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Aft Flight Deck RMS Crew Station/Crew Interface 

by end effector velocity, joint rate, and motor current limiting 
within the software system under normal operating conditions. 
Joint velocity is limited during software-supported control modes 
by specifying a rate limit for each joint by the software system. 
Current limiting by the computer occurs during capture/ 
rigidization operations. When the capture command is detected, 
the software commands zero current to all joint servos, except 
for the wrist roll joint servo; thus, for a short period, there is a 



“limp” arm, except for the wrist roll joint. This is to allow for 
constrained motion adjustment during deployment. 

Normal braking is accomplished by motor deceleration, 
while the joint brakes are used for emergency or driving 
contingency operations only. Backdriving occurs when the 
payload or moving arm transmits kinetic energy into the drive 
train. 

The RMS can be operated in any one of five different 
modes: automatic, manual augmented, manual single-joint drive, 
direct drive, and manual backup drive. 

The normal loaded arm movement rate is up to 0.06 meters 
per second (0.2 feet per second) and the unloaded arm move¬ 
ment rate is up to 0.60 meters per second (2 feet per second), no 
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payload for the latter. Rate of movement can be controlled 
within 0.009 meters per second (0.03 feet per second) and 0.09 
degrees per second. 

The manual augmented mode is used to grapple a payload, 
maneuver it into or out of the payload retention fittings or 
handling aids, and grapple or stow a special-purpose end effector 
in orbit. The manual augmented mode enables the operator to 
direct the end-point of the arm using two 3-degree-of-freedom 
hand controllers to control end effector translation and rotation 
rate. The control algorithms process the hand controller signals 
into a rate demand to each joint of the arm. The operator can 
carry out manual augmented control of the arm using any four 
coordinate systems: orbiter, end effector, payload, or orbiter 
loaded. 

When the manual orbiter mode is selected, rate commands 
through the aft flight deck station RMS translation hand control 
(THC) result in motions at the tip of the end effector which are 
parallel to the orbiter-referenced coordinate frame and com¬ 
patible with the up/down, left/right, in/out direction of the THC. 
Commands from the aft flight deck station RHC result in 
rotation at the tip of the end effector, which are also about the 
orbiter-referenced coordinate frame. 

The manual end effector mode is to maintain compatibility 
at all times between rate commands at the THC and RHC and 
the instantaneous orientation of the end effector. The end 
effector mode is used primarily for grappling operations in 
conjunction with a wrist-mounted CCTV camera which is 
oriented with the end effector coordinates and rolls with the end 
effector. The CCTV scene presented on the television monitor 
has viewing axes which are oriented with the end effector 
coordinate frame. This results in compatible motion between the 
rate commands applied at the hand controllers and movement of 
the background image presented on the television monitor. 



Up/down, left/right, in/out motions of the THC results in the 
same direction of motion of the end effector as seen on the 
television monitor, except that the background in the scene will 
move in the opposite direction. Therefore, the operator must 
remember to use a “fly to” control strategy and apply commands 
to the THC and RHC that are toward the target area in the 
television scene. 

The manual orbiter loaded mode is to enable the operator 
to translate and rotate a payload about the orbiter axis with the 
point of resolution of the resolved rate algorithm being at a 
predetermined point within the payload, normally the center of 
geometry. This allows for pure rotations of the payload, which is 
useful for berthing operations. 

There are two types of automatic modes, preprogrammed 
and operator commanded. The preprogrammed auto mode can 
store up to 20 automatic sequences in the computer, four of 
which can be assigned for selection at the aft flight deck station. 

In the automatic modes, the payload is maneuvered to 
different locations for data taking according to a preprogrammed 
sequence. 

Each automatic sequence is made up of a series of positions 
and attitudes of the end effector which define a trajectory of 
motion. The series may have from one to 199 points to define 
the trajectories. Pauses may be preprogrammed into the 
trajectory at any point. These will automatically cause the arm to 
come to rest, from which it may be able to proceed with the 
automatic sequence through the auto sequence “Proceed/Stop” 
switch on the aft flight deck station display and control panel. 
The operator can use the “Stop” position to halt the automatic 
sequence. This will bring the arm to rest, the switch is positioned 
to “Proceed” to resume the automatic sequence. When the last 
point in the sequence is reached, the computer will terminate the 
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movement of the arm and enter a position hold mode. The speed 
of the end effector between points in a sequence is governed by 
the individual joint rate limits set in the RMS software. 

The operator-commanded automatic mode moves the end 
effector from its present position and orientation to a new one 
defined by the operator to the computer via the keyboard and 
RMS cathode ray tube (CRT) display. After the data is keyed in, 
the RMS software verifies that the acquired position and orienta¬ 
tion are “legal” with respect to arm configuration and reach 
envelope. The outcome of this check is displayed on the CRT. 
After the check, a “Ready” light will be displayed and the 
operator can execute the automatic sequence by placing the 
automatic sequence switch to “Proceed.” The end effector will 
move in a straight line to the required position and orientation 
and then enter the hold mode. The operator can stop and start 
the sequence through the automatic sequence switch. 

The single-joint drive control mode enables the operator to 
move the arm on a joint-by-joint basis with full computer 
support, thereby enabling full use of joint drive characteristics on 
a joint-by-joint basis. The operator supplies a fixed drive signal 
to the control algorithms via a toggle switch at the aft flight deck 
station. The algorithms supply joint rate demands to the selected 
joint while holding position on the other joints. The single-joint 
drive mode is used to stow and unstow the arm and drive it out 
of joint travel limits. 

Direct-drive control is a contingency mode. It bypasses the 
manipulator control interface unit (MCIU), computer, and data 
buses to send a direct command to the motor drive amplifier 
(MDA) via hardwires. The direct-drive mode is used when the 
MCIU or computer has a problem that necessitates arm control 
by the direct drive mode to maneuver the loaded arm to a safe 
payload release position or to maneuver the unloaded arm to the 
storage position. The operator must place the brake on and select 
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direct drive on the mode select switch. Since this is a contingency 
mode, full joint performance characteristics are not available. 
Computer-supported displays may or may not be available, 
depending on the fault that necessitated use of direct drive. 

Backup drive control is a contingency mode used when the 
prime channel drive modes are not available. The backup is a 
degraded joint-by-joint drive system. It meets the fail-safe 
requirement of the RMS by using only the drive train of the 
prime channel. 


Safing and braking are the two methods available for 
bringing the arm to rest. Safing can be accomplished by the 
operator from the aft flight deck station or by the MCIU in 
receipt of certain failure indications. Operator-initiated safing is 
sent on hardwires to the input latches, setting them to zero and 
thus resulting in zero current to each joint independent of 
computer commands. 


The RMS has a built-in test capability to detect and display 
critical failures. It monitors the arm based electronics (ABE), 
display and controls, and the MCIU software checks in the 
computer monitor computations. Failures are displayed on the 
aft flight deck station panel and on the CRT and also are 
available for downlinking through orbiter telemetry. 


All of the major systems of the ABE are monitored by 
built-in test equipment. The MCIU checks the integrity of the 
communications link between itself and the ABE, display and 
control, and the orbiter computer. It also monitors end effector 
functions, thermistor circuit operation, and its own internal 
consistency. The computer checks cover an overall check of each 
joint’s behavior through the consistency check, encoder data 
validity, and end effector behavior, as well as the proximity of 
the arm to reach limits, soft stops, and singularities. 






Space Transportation System 



The caution/warning annunciators are located on the aft 
flight deck station display panel. There are six caution annuncia¬ 
tors (port temperature, starboard temperature, reach limit, 
singularity, control error, and check CRT) and five warning 
annunciators (release, derigidize, ABE, GPC data, and MCIU). A 
“Master Alarm” light and an audio signal attract the flight crew 
member’s attention whenever a fault condition is detected. 


A jettisoning system is installed within the Rockwell- 
provided manipulator positioning mechanism in the event the 
RMS cannot be stowed. Three floodlights are installed on each 
side of the payload bay. A portion of the orbiter closed circuit 
television (CCTV) system supports the payload deployment 
retrieval operations. The payload deployment retrieval operator 
uses the payload bay TV cameras, the remote manipulator arm 
cameras, the TV monitors, and the TV controls and displays to 
assist in all phases of the payload deployment retrieval system 
operations. There are five TV cameras available and they can be 
positioned in the following locations, depending upon mission 
needs: arm wrist, arm elbow, forward port bulkhead, forward 
starboard bulkhead, aft port bulkhead, aft starboard bulkhead 
and keel (one of four predetermined positions). 

The wrist TV camera is mounted on the roll joint of the 
arm; the elbow TV camera is mounted on the lower arm boom 
next to the elbow joint. The payload bay bulkhead TV camera 
brackets are attached to the aft and forward bulkheads. The keel 
camera bracket is mounted to the bottom of the payload bay. 
The TV monitors and the displays and controls are mounted on 
the aft flight deck display and control panel station. 

The TV cameras used for payload deployment and retrieval 
operations are identical and, therefore, interchangeable. They are 
black and white cameras. The cameras have a pan/tilt unit, which 
provides plus or minus 170° in pan and tilt, except when used on 
the arm’s wrist or in the payload keel. 


X 0 = 1307 
V 0 = 87 
Z 0 = 446 
Pan/Tilt 


OPTIONS 

RMS Arm - 2 Locations, One at 
Wrist, One at Elbow 
Bulkheads - 2 Options on Each 
Bulkhead (Mirror 
Locations), 4 Total 
Locations 

Keel - 4 Mounting Locations 
Payload - Unique Option (s) as 
Required 
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for Bracket 
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Port RMS 
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EVA TV Connector 

Remove 
Manipulator 
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Remote Manipulator System 


There are two black and white monitors. The monitors’ 
electronic crosshairs have both vertical and horizontal com¬ 
ponents at the electrical center of the image. They are used to 
align the cameras with targets and sighting aids. The crosshairs 
are also used to align overlays with the monitor image. 
Alphanumerics are available on the monitors. The pan and tilt 
angles are displayed in degrees and tenths of degrees when the 
monitors display full scene images. The alphanumerics can be 
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turned off. Each monitor can display two images simultaneously. 
The right or left half of the monitor will display the center half 
of the selected camera scene when the split screen mode is used. 

Spar Aerospace Limited, Toronto, Canada, is the prime 
contractor to the National Research Council for development of 
the RMS for NASA. CAE Electronics Ltd, Montreal is respons¬ 
ible for the displays and controls in the orbiter. RCA Ltd, 
Montreal is responsible for the electronic interfaces, provides 
servo amplifiers and power conditioners. Dilworth, Secord, 
Meagher and Assoc. Ltd (DSMA), Toronto is responsible for the 
end effector. 

PAYLOAD RETENTION MECHANISMS 

Nondeployable payloads are retained by passive retention 
devices, whereas, deployable payloads are secured by motor- 
driven, active retention devices. 

Payloads are secured in the orbiter payload bay by means of 
the payload retention system or are equipped with their own 
unique retention systems. 

The orbiter payload retention system provides three-axis 
support for up to five payloads per flight. After the initial 
orbiter development flights, the payload bay will be modified to 
accommodate attach fittings for five payloads. 

The payload retention mechanisms secure the payloads 
during all mission phases and provides for installation and 
removal of the payloads when the orbiter is either horizontal or 
vertical. 

Attachment points in the payload bay are in 99-millimeter 
(3.933-inch) increments along the left- and right-side longerons 
and along the bottom centerline of the bay. Of the potential 
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172 attach points on the longerons, 48 are unavailable because of 
the proximity of spacecraft hardware. The remaining 124 may 
be used for carrier/payload attachment; of these, 116 may be 
used for deployable payloads. Along the centerline keel, 89 
attach points are available, 75 of which may be used for deploy¬ 
able payloads. There are 13 longeron bridges per side and 12 
keel bridges available per flight. Only the bridges required for a 
particular flight are flown. The bridges are not interchangeable 
because of main frame spacing, varying load capability, and 
subframe attachments. 

The longeron bridge fittings are attached to the payload bay 
frame at the longeron level and at the side of the bay. Keel 
bridge fittings are attached to the payload bay frame at the 
bottom of the payload bay. 

The payload trunnions are the interfacing portion of the 
payload with the orbiter retention system. The trunnions that 
interface with the longeron are 82 millimeters (3.25 inches) in 
diameter and 177.8 or 222.2 millimeters (7 or 8.75 inches) long, 
depending upon where they are positioned along the payload 
bay. The keel trunnions are 76.2 millimeters (3 inches) in diam¬ 
eter and vary in length from 101.6 to 292.1 millimeters (4 to 
11.5 inches), depending upon where they fit in the payload bay. 

The orbiter/payload attachments are the trunnion/bearing/ 
journal type. The longeron and keel attach fitting have a split, 
self-aligning bearing for nonrelease-type payloads in which the 
hinged half is bolted closed. For on-orbit deployment and 
retrieval payloads, the hinged half fitting releases or secures the 
payload by latches that are driven by dual redundant electric 
motors. 
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Payload guides and scuff plates are used to assist in deploying 
and berthing payloads in the payload bag. The payload is con¬ 
strained in the X direction by guides and in the Y direction by 
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scuff plates and guides. The guides are mounted to the inboard 
side of the payload latches and interface with the payload trun¬ 
nions and scuff plates. The scuff plates are attached to the 
payload trunnions and interface with the payload guides. 

The guides are V shaped with one part of the V being 
50.8 millimeters (2 inches) taller than the other part. Parts 
are available to make either the forward or aft guide, the tallest. 
This difference enables the operator monitoring the berthing or 
deployment operations through the aft bulkhead TV cameras to 
better determine when the payload trunnion has entered the 


guide. The top of the tallest portion of the guide is 609.6 mil¬ 
limeters (24 inches) above the centerline of the payload trunnion 
when it is all the way down in the guide. The top of the guide 
has a 228.6-millimeter (9-inch) opening. These guides are 
mounted to the 203.2-millimeter (8-inch) guides that are a part 
of the longeron payload retention latches. 

The payload scuff plates are mounted to the payload 
trunnions or the payload structure. There are normally three or 
four longeron latches and a keel latch for on-orbit deployment 
and retrieval of payloads. These latches are controlled by dual 
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Active Payload Retention System 
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Motors 


redundant electric motors with either or both motors releasing 
or latching the mechanism. The operating time of the latch is 
30 seconds with both motors operating or 60 seconds with one 
motor operating. The latch/release switches on the aft flight 
deck display and control panel station control the latches. Each 
longeron latch has two microswitches sensing the ready-to-latch 
condition. Only one is required to control the ready-to-latch 
talkback indicator on the aft flight deck display and control 


Liner Supports 



Active Keel Fitting 


panel station. Each longeron latch also has two microswitches to 
indicate latch and two to indicate release. Only one of each is 
required to control the latch or release talkback indicator on the 
aft flight deck display and control panel station. The keel latch 
also has two microswitches that sense when the keel latch is 
closed with the trunnion in it. Only one of the switches is 
required to operate the talkback indicator on the aft flight deck 
display and control panel station. The keel latch also has two 
microswitches that verify if the latch is closed or open, with only 
one required to control the talkback indicator on the aft flight 
station display and control panel station. 


It is noted that the keel latch centers the payload in the yaw 
direction in the payload bay; therefore the keel latch must be 
closed before the longeron latch is closed. The keel latch can 
float plus or minus 69 millimeters (plus or minus 2.75 inches) in 
the X direction. 
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Orbiter Payload Guide and Trunnion/Scuff Plate (Nominal) 


Orbiter Active Latch Guide 
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TRACKING AND DATA RELAY SATELLITE SYSTEM 


Four Tracking and Data Relay Satellites (TDRS)/Advanced 
Westar-shared service satellites and ground support equipment are 
being built by TRWs Defense and Space Systems Group, 
Redondo Beach, CA, for Western Union Space Communications 


Incorporated. Western Union will own and operate the entire 
TDRS system, leasing tracking and data relay services to NASA 
in its commercial communications capacity to the Western Union 
Telegraph Company for its satellite transmission. 


TDRSS 

WEST 



EARTH 

STATION 


USER SATELLITE 
ORBIT 




ORBITAL GEOMETRY shows how TDRSS looks down on 
all NASA earth-orbiting spacecraft to keep track of them 
and relay their communications. At the same time, TDRSS 
looks down on the entire continental United States and 
the Western Union and private commercial terminals 
whose messages are relayed by the TDRSS Advanced 
Westar payload. 


TDRSS 
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Tracking and Data Relay Satellite System 
Ground Station , White Sands , New Mexico 
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Tracking and Data Relay Satellite System Antenna 
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Tracking and Data Relay Satellite System 
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The advantage to NASA and commercial users of sharing 
telecommunications equipment and services is more flexibility in 
handling different kinds of traffic and greater reliability at lower 
cost. TDRS is the first such large-scale space undertaking to share 
government and business telecommunications services. This 
shared use concept will mean cost savings to the government and 
will assure Western Union that its Advanced Westar satellite 
needs will be fulfilled. For Western Union’s customers, this will 
provide continuity of existing services and the availability of the 
most technologically advanced system. 

Both the NASA tracking and data relay portion of the 
telecommunications payload and the Western Union Advanced 
Westar portion are fully integrated and share common 
equipment. This payload is separate from but carried by the basic 
bus which contains satellite operating and housekeeping 
equipment. In another space first, TDRS incorporates three 
frequency bands, adding the high capacity K-band to the 
conventional S- and C-bands. 

The four TDRS satellites are identical and interchangeable 
for greater system redundancy. Two of the four satellites will be 
used by NASA, another is planned for use by Western Union for 
Advanced Westar commercial service, and the fourth satellite will 
be an on-orbit spare, shared by both NASA and Western Union. 
Two of the four satellites will be stationed over the Atlantic 
Ocean and two are stationed over the Pacific Ocean. 

The TDRS satellites will relay data to and from Space 
Shuttle, unmanned Earth-orbiting spacecraft and the Earth 
Station at NASA’s White Sands, New Mexico, Test Facility. 
TDRS offers simultaneous data relay services for up to 32 user 
spacecraft in orbits up to approximately 2,693 nautical miles 
(3,100 statute miles) through 85 to 100 percent of each 
spacecraft’s orbit. Today’s Earth stations only provide an average 
of 15 percent orbital tracking for each revolution due to the line 


of sight acquisition and loss of signal line of sight of that ground 
station in respect to the spacecraft. 

The TDRS is carried into Earth orbit in the payload bay 
of the Space Shuttle. At an on-orbit altitude of approximately 
150 nautical miles (172 statute miles), the Space Shuttle remote 
manipulator system is utilized to remove the TDRS with its 
attached upper stage from the payload bay into space. The upper 
stage is ignited with the attached TDRS to place the TDRS into 
its 22,300 nautical mile (25,662 statute mile) geosynchronous 
orbit. Once the TDRS is on-orbit, the upper stage backs off, 
leaving the TDRS to drift in its assigned geostationary position. 

Each TDRS satellite is 17.42 meters (57.2 feet) wide with 
its solar arrays deployed, 12.98 meters (42.6 feet) wide at the 
deployed antennas, 4.5 meters (15 feet) deep and weighs 2,932 
kilograms (4,700 pounds) on orbit. Each consists of solar panels 
for electrical power supplemented with batteries during eclipse; a 
three-axis stabilization system maintains attitude control; body 
fixed momentum wheels and monopropellant hydrazine thrusters 
interact with earth and sun sensors to stabilize and point the 
satellite fixed antennas at Earth targets; the three steerable 
antennas are pointed by command through gimbal drives; and 
hydrazine thrusters are used for satellite positioning and 
north-south and east-west station keeping. 

The TDRS satellite communications payload operates as a 
repeater, relaying signals to and from the Earth station and user 
spacecraft. No signal processing is done on board the TDRS. 
As many functions as possible have been removed from the 
TDRS and implemented in the Earth station. This increases 
system reliability and availability since Earth stations hardware is 
available for repair and calibration throughout the life of the 
TDRS, which is 10 years. 

The Earth station at NASA’s White Sands, New Mexico, 
Test Facility is one of the largest and most complex ever built. 
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Signals relayed from the TDRS satellites are processed in the 
Earth station by demodulation equipment which incorporates 
the latest technology in high-data-rate reception. Automatic data 
processing equipment aids in making user satellite tracking 
measurements. This equipment also controls all communications 
equipment in the Earth station and collects TDRS status data for 
transmission along with the user spacecraft data. 

All data to and from NASA will be handed over to NASA at 
the station at White Sands. NASA will route the data to the 
various using NASA centers such as the Johnson Space Center 
Mission Control Center in Houston, Texas, for Space Shuttle 
flights. The station also takes command from NASA for 
transmission to user spacecraft via the TDRS satellites. 

Advanced Westar commercial data links will operate 
independently of this station, except for satellite command and 
control through the K-band tracking, telemetry, and command 
link. 


Electronic hardware is jointly supplied by Harris Electronics 
System Division in Melbourne, Fla., and TRW, who also performs 
integration and test of the total Earth station. TRW is also 
developing software for the overall system and will integrate this 
software with the Earth station and the satellites. This software 
ties together the space segment and the ground segment. 

Because TDRS long-term reliability and adaptability are 
very important, the Earth station performs many functions 
which are ordinarily found in the space segment of a system. For 
example, the beam of the multiple-access phased array is formed 
and controlled by the Earth station, as are the control and 
tracking functions of the satellite single-access antennas. 

The earth station covers nine acres at NASA’s White Sands, 
New Mexico, Test Facility. 
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SPINNING SOLID UPPER STAGE 

The Spinning Solid Upper Stage (SSUS) is a privately 
developed rocket vehicle by McDonnell Douglas Astronautics 
Company in Huntington Beach, CA, for service in the 1980’s. 
The SSUS is designed to be released from the payload bay of the 
Space Shuttle orbiter then boost unmanned spacecraft to orbits 
higher than the orbiter’s maximum operating altitude. 

Communications satellites aimed toward geosynchronous 
orbits at 35,887 kilometers (22,300 miles), and others intended 
for orbits above the orbiter’s limits, must be transferred upward 
from the orbiter with a boost from another rocket. The SSUS 
provides the boost. Two versions are in development. The 
SSUS-A is designed for heavy payloads and the SSUS-D is for 
smaller payloads. 

The SSUS-A will be able to lift a satellite weighing as much 
as 1,996 kilograms (4,400 pounds) when released from the 
orbiter into a geosynchronous orbit. The SSUS is powered by a 
solid propellant rocket motor developed by Thiokol Corporation 
as a commercial derivative of the third stage for the U.S.A.F. 
Minuteman Missile. SSUS-A is approximately 2.29 meters 
(7.5 feet) long and 1.5 meters (4.9 feet) in diameter. 

SSUS-D will be able to place up to 1,058 kilograms (2,320 
pounds) of payload on a geosynchronous transfer track. Options 
are available to raise this capability to 1,245 kilograms (2,750 
pounds). A new Thiokol Corporation solid propellant rocket 
motor designated STAR 48, is being developed for SSUS-D. The 
motor is 121.9 centimeters (48 inches) in diameter and 
approximately 1.82 meters (6 feet) long. Variations in 
propellant loading and in rocket nozzle length are available to 
tailor the system for specific mission requirements. 

The SSUS and its spacecraft will be mounted on a special 
cradle developed by McDonnell Douglas for installation in the 
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orbiter payload bay. A payload attach fitting at the top of the 
rocket motor joins the SSUS to its spacecraft. At the base of the 
motor are a spin table and a separation system. 

The spring-loaded separation system releases the SSUS and 
its payload from the payload bay of the orbiter, pushing it out of 
the payload bay before the SSUS rocket motor is fired to send 
the payload to its final destination. Moments before the SSUS 
launch from low earth orbit the spin table is activated to provide 
both SSUS and payload a rotating motion which stabilizes their 
flight. 

McDonnell Douglas is developing SSUS with private funding 
as a commercial venture. The company has received orders for 
both models, with three customers to date: NASA, Hughes 
Aircraft Company’s Space and Communications Group, and the 
Ford Aerospace and Communications Corporation. 

SPACELAB 

Spacelab is the manned laboratory being built by a group of 
European nations. This laboratory, which normally will take up 
the entire cargo bay, will be able to take scientists and 
researchers into space with their experiments. The Spacelab is 
not deployed free of the orbiter. The Spacelab is scheduled to 
make a number of flights aboard the Shuttle. 

NASA, with the Marshall Space Flight Center as lead center 
and the European Space Agency (ESA), formerly known as 
ESRO (European Space Research Organization), signed a 
memorandum of understanding on September 24, 1973, in 
which ESA would design, develop, and test a space laboratory to 
be flown in the cargo bay of the orbiter. ESA has 11 member 
nations: Belgium, Denmark, France, Ireland, Italy, Netherlands, 
Spain, Sweden, Switzerland, United Kingdom, and West 
Germany. A twelfth, Austria, is an observer rather than a full 
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member. All except Sweden are participating in the Spacelab 
program. 

The NASA-ESA agreement represented a major set in the 
sharing of space costs. The estimated cost of Spacelab to be 
borne by ESA member nations is calculated at approximately 
$400 million. ESA will deliver to NASA one Spacelab 
engineering model, one flight unit with spares, and two sets of 
ground support equipment. In addition, ESA will provide 
engineering post-development support and provide follow-on 
production. 

The Spacelab flight unit will be delivered to NASA one year 
before the first mission and is designed to have a lifetime of 
50 missions or five years. Nominal mission duration of the 
Spacelab is seven days, but is designed so that missions up to 30 
days can be completed by trading payload capability for 
consumables and a power extension package. 

An industrial consortium headed by ERNO-VFW Fokker 
was named by ESA in June 1974 to build the Spacelab. 
The six-year contract presently calls for the delivery of the first 
fully qualified Spacelab flight unit in 1980. 

Spacelab is developed on a modular basis and can be varied 
to meet specific mission requirements. Its two principal 
components are the pressurized module, which provides a 
laboratory with a shirtsleeve working environment, and the open 
pallet that exposes materials and equipment to space. Each 
module is segmented, permitting additional flexibility. 

The pressurized module or laboratory comes in two 
segments. One, called the core segment, contains supporting 
systems such as data processing equipment and utilities for both 
the pressurized modules and the pallets. It also has laboratory 
fixtures such as floor-mounted racks and work benches. 
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The second, called the experiment segment, is used to 
provide more working laboratory space. It contains only 
floor-mounted racks and benches. When only one segment is 
needed, the core segment is used. 

Each pressurized segment is a cylinder 4.1 meters (13-1/2 
feet) in diameter and 2.7 meters (9 feet) long. When both 
segments are assembled with end cones, their maximum outside 
length is 7 meters (23 feet). 

A tunnel connects the pressurized laboratory with the 
pressurized cabin of the orbiter. The tunnel also is segmented so 
that its length can be varied. An airlock module can be attached 
to the tunnel to provide additional access to space for 
extravehicular activities. 

Spacelab total weight (its payload and payload 
chargeable-items) will not exceed 14,515 kilograms (32,000 
pounds). 

Five pallet segments are available. Each U-shaped pallet is 
3 meters (10 feet) long, built by the British Aerospace Corp. 
under contract to ERNO (Zentralgesellschaft VFW-Fokker mbh) 
and the ESA (European Space Agench). Each pallet is not only a 
platform for mounting instrumentation but also can cool 
equipment, provide electrical power, and furnish connections for 
commanding and acquiring data from the experiments. When 
pallets only are used, Spacelab portions of the essential systems 
for supporting experiments (power, experiment control, data 
handling, and communication, etc.) are protected in a small 
pressurized and temperature-controlled housing called an igloo. 
Communications normally is an orbiter function on Spacelab 
pallet flights. The pallets are designed for large instruments, 
experiments requiring direct exposure to space, or those needing 
unobstructed or broad fields of view. Such equipment includes 
telescopes, antennas, and sensors such as radiometers and radars. 
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The experimenters aboard Spacelab are called payload 
specialists. They are nominated for flight by the organization 
sponsoring the payload. They are accepted, trained, and certified 
for flight by NASA. Their training includes zero-gravity exercises, 
simulation of operations and emergencies, briefings of flight 
plans, and space flight housekeeping. 

From one to four payload specialists can be accommodated 
for each Spacelab flight. These specialists ride into space and 
return to earth in the orbiter cabin, but they work in Spacelab 
from seven to 30 days and return to the orbiter’s crew cabin 
when off duty. 

More than 2,000 world scientists were represented in the 
responses to invitations to participate in the first Spacelab 
missions in the 1980’s. Of these, NASA and ESA selected 
proposals representing 222 investigators from 15 countries. 
The countries are Austria, Belgium, Canada, Denmark, Federal 
Republic of Germany, France, Italy, India, Japan, the 
Netherlands, Norway, Spain, Switzerland, United Kington and 
United States. The investigations planned by the 222 scientists 
will be conducted in orbit by the Spacelab payload specialists 
who will be in contact with their colleagues on the ground. 

Some of the experiments that may be flown about Spacelab 
include: 

• Earth Surveys—These will gather a variety of 
information useful in transportation, urban planning, 
pollution control, farming, fishing, navigation, weather 
forecasting, and prospecting. 

• Astronomy Observations—These are designed to add 
knowledge about our sun and its interactions with the 
earth’s environment, to view transient events such as 
comets and novas, and to make observations of 
high-energy radiation. This radiation—gamma rays, 


47 







Space Transportation System 



X-rays, ultraviolet light- does not for the most part 
pass through the atmosphere and cannot be studied on 
earth. Locked in it are answers to many questions 
about the nature, origin, and evolution of celestial 
phenomena. 

• Life Science-Studies of man and other living things 
in space have indicated significant metabolic changes 
resulting from the absence of gravity; continued 
studies are expected to increase the understanding 
of these changes and contribute to the advancement 
of medicine. 

• Biomedicine—The gravity-free environment of space 
has demonstrated significant advantages in separating 
and purifying biological particles. Space processing 
provides increased opportunities for removal of 
impurities from vaccines that cause undesirable side 
effects and for isolating specific cells or antibodies for 
treatment of disease. 

• Industrial Technology-Zero gravity lends itself to 
manufacturing of new alloys and other composite 
materials that are uniquely strong, lightweight, and 
temperature-resistant. Zero gravity has proved 
conducive to growing of very large crystals of high 
purity for use in electronics and producing pure 
glass-free of contamination for optical, electronic and 
laser uses. 

MATERIALS PROCESSING IN SPACE 

Materials processing in space has progressed through 
NASA’s Apollo, Skylab, and the Apollo-Soyuz Test Project with 
exciting results obtained. Space flight has opened up to science 
and industry a new environment in which the effects of gravity 


are absent. We have only begun to understand or take advantage 
of this new phenomenon, but it holds much promise. 

Our Earth-bound environment limits certain materials 
processes. All our experience on Earth is constrained by the 
force of gravity—the mutual attraction that the Earth and 
everybody near it exert on each other. The weight of the objects, 
their falling if unsupported, and the pressure they exert on their 
supports are manifestations of gravity. In almost all human 
activities and industrial processes, gravity is the dominant force 
we must contend with; it constrains our motion, produces 
friction which must be overcome, and separates some fluids. 
It causes layering in alloys, contamination in glasses, separation 
in chemicals, and defects in electronic materials. 

Materials processing is dedicated to exploring the benefits of 
zero-gravity (actually a tiny gravitational attraction is present; 
1/3,000 to 1/6,000 of what we experience on Earth and can be 
called low, reduced or microgravity) and ultra-high vacuum of 
space (one-trillionth of an atmosphere). The findings to date 
from Apollo, Skylab and Apollo-Soyuz Test Project missions 
have brought back materials fashioned in space that were more 
pure and uniform than ever seen before—almost physically 
perfect. If we could develop materials to their full physical, 
thermal, chemical, optical and electric theoretical potential, 
major breakthroughs in medicine, electronics, energy, 
instrumentation, and construction could be achieved. The 
development of the Space Shuttle/Spacelab opens the door to 
working routinely in space and commercially attractive materials 
processing in space ventures. 

NASA awarded the first major contract for Materials 
Processing in space payloads to the TRW Defense and Space 
Systems Group, Redondo Beach, Calif. TRW designs, develops, 
tests, integrates and delivers two Space Shuttle/Spacelab 
payloads to NASA. NASA’s Marshall Space Flight Center, 
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Huntsville, Ala., manages the projects. They will be used to 
conduct applied research in fluids technology and materials 
solidification relating to electronic materials, metals, ceramics, 
glass, and chemicals in the low-gravity space environment. 

The fluid investigation will take place inside Spacelab. The 
solidification experiment will be located on a single pallet outside 
Spacelab in the payload bay of the spacecraft. The experiments 
will compare results with ground-based research to examine such 
questions as how gravity or lack of it affects crystal growth, 
purification, solidification, and processing in fluids. The direct 
results from these experiments may or may not provide answers 
to much-needed questions on earth. No one knows if spacebome 
products will soon find their way into the homes of earthbound 
humans, but new forms of glass, metal alloys, and 
pharmaceuticals are postulated. 

ATMOSPHERIC, MAGNETOSPHERIC, 

AND PLASMAS IN SPACE 

The Atmospheric, Magnetospheric, and Plasmas (AMPS) in 
space program utilizes the versatile Space Shuttle/Spacelab in 
conducting a variety of active experiments and coordinated 
passive measurements. 

The atmospheric and magnetic field surrounding Earth form 
a protective barrier against the solar wind and hostile 
environment of space. This life-sustaining buffer zone determines 
our planet’s ecosystem and has a decisive effect on the Earth’s 
climate. 

Scientific spacecraft probing of the near-earth environment 
has enabled the identification and sampling of the nature of the 
three outermost regions; the magnetosphere, ionosphere, and 
atmosphere. Important knowledge has been gained of these 
complex regions and their interactions; however, limitations of 


automated spacecraft payload weight and size have precluded 
carrying into space the broad instrument complement necessary 
for performing studies in a coordinated and comprehensive 
manner. For the first time, a full manned laboratory of 
instruments can be carried into a region of interest to conduct 
remote and in-situ investigations in a structured, evolutionary 
program. 

The experiments involve observing the effects produced by 
natural processes or by disturbances that are purposely imposed. 
Understanding the near-earth region involves studying the earth’s 
electric and magnetic field system, energetic particle and 
electromagnetic wave interactions, physical processes associated 
with the motion of bodies in rarefied plasmas, and the chemistry 
and dynamics of the upper atmosphere. 

The AMPS program uses various techniques and instruments 
to explore four specific disciplines: particle interaction, plasma 
interaction and flow, atmospheric science and wave phenomena. 
AMPS will allow investigators to perturb the near-earth 
environment in a controlled and systematic manner. 

Acoustic gravity wave and gas cloud expansion dynamics 
such as plasma density, temperature, and composition and initial 
investigation of wave-particle and wave-plasma instabilities in the 
ionosphere will be studied for possible relation between changes 
in solar wind velocity and magnetic fields. 

Determination of atmospheric constituents by measuring 
infrared and ultraviolet absorption, in addition to detection of 
atmospheric minor constituents using an infrared interferometer 
and infrared radiometer will study temperature profiles, wind 
velocities and constituents such as hydroxyl (oxygen-hydrogen) 
radical chlorine chemistry, ozone and minor atmospheric 
constituents such as nitric oxide and chlorine oxide. 
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Atmospheric , Magnetospheric , and Plasmas in Space 


SPACE TELESCOPE 

Lockheed Missiles and Space Company, Incorporated, 
Sunnyvale, Calif., designs and builds the Space Telescope support 
systems module which is 13 meters (43 feet) long, 4.2 meters 
(14 feet) in diameter—very similar in size to the 3,048 millimeter 
(120 inch) telescope at Lick Observatory—and houses optics, 
sensors, support system. They are also responsible for systems 
engineering, analysis, integration, verification of the complete 
assembly, in addition to providing support of ground and flight 
operations under contract from NASA. Perkin-Elmer Corpora¬ 
tion’s Optical Technology Division, Danbury, Conn., is responsi¬ 
ble for the Space Telescope optical telescope assembly, including 
the optics, focal plane structure, fine guidance sensor, and 
associated controls. NASA’s Goddard Space Flight Center, 
Greenbelt, Md., is responsible for the scientific instruments, 
mission operations and data reduction. ESA provides one 
scientific instrument, solar arrays and participates in flight 


operations. NASA’s Office of Space Science is responsible for 
overall direction of the Space Telescope System and NASA’s 
Marshall Space Flight Center, Huntsville, Ala., is responsible for 
overall project management. 

The Space Telescope would be placed about 270 nautical 
miles (310 statute miles) above the Earth where it will be free of 
atmospheric interference, such as filtering, haze, twinkling and 
light pollution, that handicaps conventional telescopes such as 
the famous Hale telescope at Mount Palomar, Calif., which is a 
5,080 millimeter (200-inch) telescope. The Space Telescope 
5,048 millimeter (95-inch) diameter optics will enable 
astronomers to detect objects 50 times fainter and view items 
with a clarity or resolution seven times better than ground-based 
observations for periods as long as 30 to 40 hours. A major 
technical challenge is to lock onto viewing targets and insure the 
telescope maintains a pointing stability of 0.007 arc seconds, 
which is roughly equivalent to a marksman in Boston zeroing in 
on a baseball in Los Angeles, Calif. 

In orbit the telescope consists of three parts: an Optical 
Telescope Assembly, Scientific Instruments, and a Support 
Systems Module. 

The Optical Telescope Assembly comprises 5,048 millimeter 
(95-inch) glass reflecting telescope. A meteoroid shield light 
baffles, and sunshade protects the optics. 

The five Scientific Instalments (Si’s) provide me means of 
converting the telescope images to useful scientific data. The Si’s 
for the first flight include the wide field/planetary camera 
(Jet Propulsion Laboratory), faint object camera (ESA/Dormer), 
faint object spectrograph (Martin Marietta), high speed 
photometry (University of Wisconsin), and high resolution 
spectrograph (Ball Brothers). Astronomy (University of Texas) is 
performed using one of the five guidance sensors. 
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Space Telescope Servicing 
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The Support Systems Module contains a very precise 
pointing and control system, communications system, thermal 
control system, and the power system. Electrical power is 
supplied by solar panels and batteries. 


In operation, light enters the open end of the telescope, is 
projected by the primary mirror onto the smaller secondary 
mirror and from there is deflected to the scientific instruments 
for analysis. The Space Telescope will also make ultraviolet and 
infrared measurements not possible on Earth. 


Celestial objects which exist under conditions of gravity, 
temperature, radiation and time that cannot be duplicated here 
on Earth will be studied, such as gaseous nebulae, dust clouds, 
variable stars, binary stars, novae, supernovae, pulsars, neutron 
stars, black holes, forming galaxies, quasars, exploding galaxies, 
and quasars. The nearby stars, solar system planets, comets, and 
the planetary systems of stars within 100 light years will also be 
subjected to Space Telescope scrutiny. 


The detailed study of plasmas in space or of mysterious 
quasars for instance could unlock secrets of tremendous new 
energy sources. Closer observation of planets in the Earth’s own 
solar system should also help us better understand the 
significance of changes now taking place on this planet. Such 
insights could be vital to preserving the world’s environment or 
adapting to changes beyond our control. 


The Space Telescope is planned to operate for 15 years 
on-orbit. It is capable of being serviced and repaired while it is in 
orbit and new instruments can be installed. It can also be 
returned to Earth for major repairs and improvements and then 
replaced into orbit. 


GETAWAY SPECIAL 


A unique opportunity has been provided by NASA for 
flying small self-contained experiments (known as Getaway 
Specials) on the Space Shuttle. The basic idea is to permit 
companies and universities, large and small-and even private 
citizens—to develop and send into space their own small 
self-contained space “payloads.” 


Three small units would have their own power supply and 
data recording systems, if required. They would remain in the 
payload bay of the Space Shuttle orbiter for the duration of the 
flight, which will be variable for a given flight. 

The cost of this unique service will depend upon the size 
and weight of the experiment. Getaway Specials of 90 kilograms 
(200 pounds), 0.14 cubic meters (5 cubic feet) may be flown at a 
cost of $10,000 or 45 kilograms (100 pounds), 0.07 cubic meters 
(2.5 cubic feet) may be flown at a cost of $5,000, or 
27 kilograms (60 pounds), 0.07 cubic meters (2.5 cubic feet) 
may be flown at a cost of $3,000. If additional services of the 
spacecraft or its flight crew are required (flipping switches, 
connecting to a NASA-provided battery pack, etc.), the price will 
be negotiated for each package. 


The “getaway special” program offers private individuals 
and companies tire opportunity to conduct space research in a 
manner previously available only to the government and very 
large corporations. Such small packages can be used as test beds 
for larger, follow-on experiments which would be flown on the 
Spacelab. In addition, the “getaway special” offers an 
opportunity to help enhance science and engineering education 
and to help set the course for the beneficial uses of space for 
years to come. 
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For detailed information on this unusual program, please 
write Public Affairs Office, NASA Marshall Space Flight Center, 
Alabama, 35812, or Director, Space Transportation System 
Operations, Code MO, NASA Headquarters, Washington 
D.C., 20546. 

SPACE SHUTTLE FLIGHTS 

In preparation for the first flight into space of Orbiter 102 
{Columbia), tens of thousands of hours of tests and simulations 
were expended at government and contractor facilities through¬ 
out the nation to qualify all the structures, flight equipment, and 
computer programs software. 

Major test programs included the 13 flights of the Approach 
and Landing Test (ALT) program at NASA’s Dryden Flight 
Research Center, Edwards Air Force Base, Calif. The main 
propulsion test article-consisting of the orbiter aft fuselage, 
three Space Shuttle main engines, external tank, and truss 
arrangement to simulate the mid fuselage-is qualifying the main 
propulsion system at the National Space Technology Laboratory 
in Mississippi. The solid rocket booster’s solid-propellant rocket 
motor is being qualified at Thiokol Chemical Corp. near Brigham 
City, Utah. The orbiter reaction control and orbital maneuvering 
systems are being qualified at NASA’s White Sands Test Facility 
near Las Cruces, N.M. Flight simulation and avionics testing are 
qualifying the Space Shuttle avionics at JSC and at Rockwell’s 
Space Systems Group in Downey, Calif. The orbiter full-scale 
structure was tested at Lockheed’s facility in Palmdale, Calif. The 
orbiter vehicle (OV-101), external tank, and solid rocket boosters 
have undergone a mated vertical ground vibration test program at 
MSFC. OV-101, external tank and solid rocket boosters have also 
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completed a fit check and checkout with the mobile launch 
platform and launch complex 39A at KSC. 

The initial four flights of Columbia will be launched from 
KSC and will verify design and operational capability of the 
Shuttle and all of the ground-based monitoring, communications, 
and support systems. The first flight was structured to minimize 
risks and complexity and was two days in duration. Because of a 
shut down fuel cell, the second flight was also two days in 
duration and contained the OSTA-1 (Office of Space Terrestrial 
and Applications) pallet and the RMS (remote manipulator 
system). The subsequent two flights are scheduled for 
and will develop and demonstrate mission and payload capa¬ 
bilities which become progressively more complex. 

53 

The first four orbital space flights of Columbia are 
scheduled to land at Dryden FRC, Edwards AFB, Calif. 

KSC launch operations has responsibility for all mating, 
prelaunch testing, and launch control ground activities until the 
Space Shuttle vehicle has cleared the umbilical tower; then 
responsibility is turned over to JSC’s Mission Control Center in 
Houston. This responsibility includes earth entry and approach 
and landing until runout completion, at which time the orbiter is 
handed over to the post-landing operations at the landing site for 
turnaround and relaunch. KSC also will process the solid rocket 
boosters and external tank for launch, as well as for re-cycling 
the solid rocket boosters for reuse. 

The following table gives tentative plans for the 47 STS 
flights. It should be remembered that these details are 
preliminary and may be changed as the program progresses. 
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STS 

Fit 

Vehicle 

No. 

Crew 

Length 

(days) 

Launch/Land 

Sites 

Inc./Altitude 
[°/mi (nm)] 

Payloads* 

Remar ks 

3 

Columbia 

2 

7 

KSC/DFRC 

38/149 (130) 

1, 2, 3, 4, 5, 6 

Objectives: Payload deployment retrieval system loaded arm test, IECM plume 
survey, payload bay door thermal test, OMS performance, star tracker/IMU tests, 
backup flight system test, radiator heat sink test, propulsion thermal soakback, 
entry aero/structural tests, flutter boundary test, on-orbit thermal test, autoland 
demonstration, active thermal control system test, OSS-1 data takes. Passive 
thermal control, 10 hr; +X solar inertial, 80 hr; -Z solar inertial, 40 hr; 

+Z solar inertial, 3 revolutions 

Main engine throttling limits: 65-100% RPL 

Max q: 650/765 psf (ascent) 

AOA landing site: DFRC at EAFB 23 

Entry angle of attack: 40° 

Crossrange: Less than 690 mi (600 nm) 

Autoland control mode: Automatic through rollout (Runway 23) DFRC at EAFB 
dry lake bed 

Payload weight: In excess of 20,000 lb (up and down) 

4 

Columbia 

2 

7 

KSC/DFRC 

28.5/161 (140) 

1, 2, 3, 4, 5, 
7,21 

Objectives: Payload bay door thermal tests, IECM contamination monitoring, 

OMS performance, IMU performance, propulsion thermal soakback, radiator heat 
sink test, UHF entry test, entry aerodynamics test, flutter boundary test, 
on-orbit thermal test, autoland demonstration. Passive thermal control, 10 hr; 

-Z solar inertial, 80 hr; +Z solar inertial, 26 hr 

Main engine throttling limits: 65-100% RPL 

AOA landing site: DFRC at EAFB 

Max q: 680/790 psf (ascent) 

Entry angle of attack: 40° 

Crossrange: Between 690 mi (600 nm) and 920 mi (800 nm) 

Autoland control mode 

Payload weight: In escess of 22,000 lb (up) 

5 

Columbia 

4 

7 

KSC/KSC 

28.5/184 (160) 

3, 4, 5, 11, 

20, 35 

Main engine throttling: 102/109% RPL 

*See Pages 58 and 59 for Payload Listings 
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STS 

Fit 

Vehicle 

No. 

Crew 

Length 

(days) 

Launch/Land 

Sites 

Inc./Altitude 
[°/mi (nm)] 

Payloads* 

Remarks 

6 

Challenger 

3 

2 

KSC/KSC 

28.5/172 (150) 

4, 5, 7, 8 

First flight of Challenger (OV -099) 

Main engine throttling: 109/109% RPL 

Lightweight ET, lightweight SRB 

7 

Challenger 

3 

5 

KSC/KSC 

28.5/184 (160) 

3, 17, 18, 

24, 33 

Heavyweight ET standard SRB 

8 

Challenger 

3 

3 

KSC/KSC 

28.5/184 (160) 

3, 13, 18, 27 

Main engine throttling: 109/109% RPL 

Lightweight ET, standard SRB 

9 

Columbia 

4 

7 

KSC/KSC 

28.5/184 (160) 

29, 38, 44, 77 

Main engine throttling: 109/109% RPL 

10 

Challenger 

6 

7 

KSC/KSC 

57/155 (135) 

15 

Main engine throttling: 102/109% RPL 

11 

Columbia 

4 

5 

KSC/KSC 

28.5/313 (272) 

14, 38 


12 

Challenger 

- 

- 

KSC/KSC 

- 

32 


13 

Discovery 

3 

3 

KSC/KSC 

28.5/172 (156) 

12, 16 

First flight of OV-103 Discovery 

14 

Columbia 

- 

- 

KSC/KSC 

- 

40 


15 

Challenger 

3 

3 

KSC/KSC 

28.5/172 (150) 

23, 30 


16 

Discovery 

4 

7 

KSC/KSC 

28.5/184 (160) 

34, 36, 55, 72 


17 

Columbia 

3 

5 

KSC/KSC 

28.5/184 (160) 

10, 19, 46 


18 

Challenger 

3 

5 

KSC/KSC 

28.5/276 (240) 

25 


19 

Discovery 

6 

7 

KSC/KSC 

57/184 (160) 

52 


20 

Columbia 

4 

7 

KSC/KSC 

28.5/184 (160) 

42, 48, 50, 61 


*See Pages 58 and 59 for Payload Listings 
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STS 

Fit 

Vehicle 

l\lo. 

Crew 

Length 

(days) 

Launch/Land 

Sites 

Inc./Altitude 
[°/mi (nm)] 

Payloads* 

Remarks 

21 

Challenger 

6 

7 

KSC/KSC 

59/232 (202) 

22 


22 

Columbia 

- 

- 

KSC/KSC 

- 

58 


23 

Discovery 

3 

3 

KSC/KSC 

28.5/368 (320) 

53 


24 

Columbia 

- 

- 

KSC/KSC 

- 

59 


25 

Discovery 

- 

- 

KSC/KSC 

- 

43 


26 

Challenger 

3 

2 

KSC/KSC 

28.5/113 (99) 

65 


27 

Columbia 

6 

7 

KSC/KSC 

57/230 (200) 

31 


28 

Challenger 

4 

7 

KSC/KSC 

28.5/184 (160) 

28, 41, 45, 49 


29 

Columbia 

- 

- 

KSC/KSC 

- 

66 


30 

Challenger 

- 

- 

KSC/KSC 


62 


31 

Columbia 

4 

7 

KSC/KSC 

28.5/184 (160) 

47, 57, 64, 74 


32 

Challenger 

- 

- 

KSC/KSC 

- 

75 


33 

Columbia 

6 

7 

KSC/KSC 

46/184 (160) 

67, 76 


IV 

Discovery 

- 

- 

WTR/WTR 

- 

78 

First Vandenberg AFB launch 

34 

Challenger 

- 

- 

KSC/KSC 


79 


35 

Columbia 

4 

7 

KSC/KSC 

28.5/184 (160) 

26, 39, 54, 80 


3V 

Discovery 

- 

- 

WTR/WTR 

- 

97 


36 

Columbia 

4 

7 

KSC/KSC 

28.5/276 (240) 

50, 73 


*See Pages 58 and 59 for Payload Listings 
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STS 

Fit 

Vehicle 

No. 

Crew 

Length 

(days) 

Launch/Land 

Sites 

Inc./Altitude 
[°/mi (nm)l 

Payloads* 

Remarks 

37 

Columbia 

- 

- 

KSC/KSC 

- 

81 


38 

Challenger 

6 

7 

KSC/KSC 

28.5/230 (200) 

82 


39 

Columbia 

- 

- 

KSC/KSC 

- 

83 


40 

Challenger 

4 

7 

KSC/KSC 

28.5/184 (160) 

60, 84, 85, 86 


41 

Atlantis 

4 

7 

KSC/KSC 

28.5/184 (160) 

56, 63, 87, 88 

First flight of OV-104 Atlantis 

42 

Columbia 

3 

3 

KSC/KSC 

28.5/113 (99) 

37 


43 

Columbia 

4 

7 

KSC/KSC 

28.5/184 (160) 

68, 89, 90 


2 V 

Discovery 

- 

- 

WTR/WTR 


91 


44 

Atlantis 

- 

- 

KSC/KSC 


92 


45 

Challenger 

- 

- 

KSC/KSC 

- 

93 


46 

Columbia 

4 

7 

KSC/KSC 

28.5/184 (160) 

94, 95, 96, 97 


47 

Atlantis 

6 

7 

KSC/KSC 

57/184 (160) 

98 


*See Pages 58 and 59 for Payload Listings 
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*Payloads 

1. DFI (development flight instrumentation) 

2. IECM (induced environmental control monitor) 

3. ACIP (aerodynamic coefficient identification package) 

4. Get away special 

5. Monodisperse latex recorder 

6. Electrophoresis 

7. Continuous flow electrophoresis experiment 

8. TDRS-A (tracking and data relay satellite) IUS-2 (inertial upper 
stage): two-stage booster used to put payloads into higher orbit 

9. Orbital maneuvering system kit/support system 

10. Intelsat (international communication satellite) V-1/SSUS-A 
(Spinning Solid Upper Stage-A - Heavy Payloads Class) 

11. SBS-C (satellite business system)/SSUS-D (Light Payloads Class) 

12. WESTARVI 

13. TDRS-B/IUS-2 

14. SMM (solar maximum mission) 

15. Spacelab— 1/long pressurized module plus pallet 

16. TDRS-C/IUS-2 

17. SPAS-01 (Indonesian communication satellite)/special structure 

18. Remote Manipulator System 

19. SBS/SSUS-D 

20. Telesat-E (Canada telecommunications satelIite)/SSUS—D 

21. DOD 82-1 (Department of Defense) 

22. Spacelab—2/igloo plus three pallets 

23. TDRS-D/IUS-2 

24. Telesat-F/SSUS-D 

25. LDEF (long-duration exposure facility) deploy/LDEF—1 

26. 0SS-4/0FT pallet (office of space science experiment) 

27. Insat-IB (India Communications Satellite)/SSUS—D 

28. TELESTAR 3-C 

29. Materials Experiment Assembly 

30. Telesat—l/SSUS—D 

31. Spacelab—3/long pressurized module plus pallet 

32. DOD 84-1 


33. PALAPA-B-1 (Indonesian communication satellite)/SSUS—D 

34. RCA (Radio Corporation of America)-K/SSUS-D 

35. OSTA—2/special structure (Office of Space and Terrestrial 
Applications) 

36. Synchom IV—1 (Hughes synchronous communication 
sateliite)/unique stage 

37. Solar polar/IUS-3 (NASA) 

38. Payload of opportunity 

39. Telesat-H/SSUS-D 

40. DOD 84-2 

41. Synchom IV-3/unique stage 

42. Synchom IV-2/unique stage 

43. DOD 85-3 

44. PALAPA- B-2/SSUS-D 

45. RCA- H/SSUS- D 

46. TELESTAR 3-B 

47. ANSCS-A/SSUS-D (Australian satellite communications system) 

48. RCA-L/SSUS-D 

49. OSTA-4/special structure 

50. LDEF retrieve/LDEF 

51. OSS-3/OFT pallet 

52. Spacelab D—1 (West Germany (/long pressurized module plus 
Spacelab pallet 

53. Space telescope/unique structure 

54. Synchom IV-4/unique stage 

55. Arabsat-A (Saudi Arabian communications satel I ite )/SSU S— D 

56. GOES-G/SSUS-D (Geostationary operational environment 
satellite) 

57. DBS LUX-A (direct broadcast system Luxembourg) 

58. DOD 85-1 

59. DOD 85-2 

60. Synchom IV-5/unique stage 

61. Arabsat-B/SSUS-D 

62. DOD 85-5 
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63. 0STA-5/special structure 

64. OAST—2 (Office of Aeronautics and Space Techno logy (/special 
structure 

65. Galileo/IUS—3 

66. DOD 85-4 

67. Spacelab—4/long pressurized module life science/ERBS (earth 
radiation budget satellite) unique structure 

68. Intelsat VI—l/SSUS—A 

69. SILTS (Shuttle infrared leeside temperature sensing) 

70. SEADS (Shuttle entry air data sensor) 

71. SUMS (Shuttle upper atmosphere mass spectrometer) 

72. 0 ST A-3/special structure 

73. MPS (materials processing science)/0FT pallet 

74. GSTAR-C (General Telephone electronic satellite) 

75. DOD 85-6 

76. E RBS (earth radiation budget satellite) 

77. OAST-1 (Office of Aeronautics and Space Technology (/special 
structure 

78. DOD 86— IV 


80. EUVE (extreme ultra-violet experiment)/special stage 

81. DOD 86-2 

82. Spacelab D-4 (West Germany) igloo plus four pallets 

83. DOD 86-3 

84. GSTAR-D 

85. ANSCS-D 

86. OSS-5/OFT pallet 

87. SPC-B (Southern Pacific Communication Company) 

88. STC DBS-A (Satellite Television Corporation) 

89. ANSCS-C 

90. OSTA-6/special structure 

91. DOD86-2V 

92. DOD 86-4 

93. DOD 86-5 

94. GOES-H/SSUS-D 

95. ANSCS-D 

96. IRIS (Italian Research interim stage) 

97. OSS-6/OFT pallet 

98. Spacelab-8 materials processing/long pressurized module plus one 
pallet 
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SOLID-ROCKET BOOSTERS 


The two solid-rocket boosters (SRB’s) provide the main 
thrust to lift the Space Shuttle off the pad and up to an altitude 
of about 45,720 meters (150,000 feet), 24 nautical miles (28 
statute miles). In addition, the two SRB’s carry the entire weight 
of the external tank and orbiter and transmit the weight load 
through their structure to the mobile launch platform. Each 
booster has a thrust (sea level) of 12,899,200 Newtons (2.9 
million pounds) at launch. They are ignited after the three 
Shuttle main engine thrust level is verified. The two SRB’s pro¬ 
vide 71.4 percent of the thrust at lift-off and during first stage 
ascent. After SRB separation, 75 seconds later, SRB apogee 
occurs at an altitude of 67,056 meters (220,000 feet), 35 nau¬ 
tical miles (41 statute miles). SRB impact occurs in the ocean 
around 122 nautical miles (141 statute miles) downrange. 

The SRB’s are the largest solid-propellant motors ever flown 
and the first designed for reuse. Each is 45.46 meters (149.16 
feet) long and 3.70 meters (12.16 feet) in diameter. At launch, 
each weighs 586.506 kilograms (1,293.004 pounds), of which 85 
percent, 503,627 kilograms (1,110,290 pounds) is propellant. 
The boosters are designed to be used at least 20 times. 

Primary elements of each booster are the motor (including 
case, propellant, igniter, and nozzle), structure, separation 
systems, operational flight instrumentation, recovery avionics, 
pyrotechnics, deceleration system, thrust vector control system 
and range safety destruct system. 

Each booster is attached to the external tank at the SRB’s 
aft frame by two lateral sway braces and a diagonal attachment. 
The forward end of each SRB is attached to the external tank at 
the forward end of the SRB forward skirt. On the launch pad, 
each booster also is attached to the mobile launch platform at 
the aft skirt by four bolts which are severed by small explosives 
at liftoff. 


The propellant mixture in each SRB motor consists of 
an ammonium perchlorate (oxidizer, 69.93 percent by weight), 
aluminum (fuel, 16 percent), iron oxide (a catalyst, 0.07 per¬ 
cent), a polymer (a binder that holds the mixture together, 
12.04 percent), and an epoxy curing agent (1.96 percent). The 
propellant is an 11-point star-shaped perforation in the forward 
motor segment and a double-truncated-cone perforation in each 
of the aft segments and aft closure. This configuration provides 
high thrust at ignition, then reduces the thrust by approximately 
a third 50 seconds after liftoff to prevent overstressing of the 
vehicle during maximum dynamic pressure (max q). 

The SRB’s are interchangeable. They are used as matched 
pairs and each is made up of four solid rocket motor segments. 
The pairs are matched by loading each of the four motor seg¬ 
ments in pairs from the same batches of propellant ingredients 
to minimize any thrust imbalance. The segmented casing design 
give maximum flexibility in fabrication and ease of transporta¬ 
tion and handling. Each segment is shipped to the launch site on 
a heavy -duty rail car with a specially built cover. 

The nozzle expansion ratio of each booster is 7.16:1. The 
nozzle is gimbaled for thrust vector (direction) control. Each 
SRB has its own redundant auxiliary power units and hydraulic 
pumps. The all-axis gimbaling capability is 8 degrees. Each nozzle 
has a carbon cloth liner which erodes and chars during firing. The 
nozzle is a convergent-divergent, movable design in which an aft 
pivot-point flexible bearing is the gimbal mechanism. 

The cone-shaped aft skirt reacts the aft loads between the 
SRB and the mobile launch platform. The four aft separation 
motors are mounted on the skirt. The aft section contains 
avionics, thrust vector control system which consists of two 
auxiliary power units and hydraulic pumps, hydraulic systems, 
and nozzle extension jettison system. 
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4 Separation Motors 
96,432 newtons 
(21,680 lb) thrust each 


Drogue Chute 



Main Parachutes (3) 


Nose Fairing 
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^Forward 
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■ SRB-External Tank 
Thrust Attachment 

Rate Gyro Assemblies (3), 
Separation Avionics, Operational 
Flight Instrumentation, Recovery 
Avionics, and Range Safety System 


Solid Rocket Booster 


) 


4 Separation Motors 
97,856 newtons 
(22,000 lb) thrust each 


Nozzle and Thrust Vector 
Control System 

K 

3.74 m (12.3 ft) 
Outside Diameter 

V 


Aft Skirt and 
Launch Support 



SRB-External Tank Attachment 
Ring, Aft Avionics and Sway Braces 


Dimensions (weights approximate) 

Length . . . , 

. . . 45.46 m (149.16 ft) 

Diameter ... 

. . . 3.70 m (12.16 ft) 

Gross Weight . , 

. . . 586,506 kg (1,293,004 lb) 

Inert Weight . . , 

. . . 82,879 kg (182,714 lb) 

Propellant Weight 

. . . 503,627 kg (1,110,190 lb) 

Thrust (sea level) 

. . . 12,899,200 newtons sea level 

(2,900,000 lb) 
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The forward section of each booster contains avionics, 
sequencer, forward separation motors, nose cone separation 
system, drogue and main parachutes, recovery beacon, recovery 
light, and a range safety system. 

Each SRB has two integrated electronic assemblies, one 
forward and one aft. The forward assembly jettisons the nozzle 
after burnout, initiates release of the nose cap and frustum, 
detaches the parachutes, and turns on the recovery aids. The aft 
assembly, mounted in the external tank/SRB attach ring, con¬ 
nects with the forward assembly and the orbiter avionics systems 
for SRB ignition commands and nozzle thrust vector control. 
Each integrated electronic assembly has a multiplexer/ 
demultiplexer which sends or receives more than one message, 
signal, or unit of information on a single communication channel. 

Eight booster separation motors (four in the nose frustum 
and four in the aft skirt) of each SRB thrust for 0.68 second 
at SRB separation from the external tank. Each solid-rocket 
separation motor is 787 millimeters (31 inches) long and 317 
millimeters (12.5 inches) in diameter. 

Location aids are provided for each SRB, frustum/drogue 
chute, and main parachutes. These include a transmitter, antenna, 
strobe/converter, battery, and salt water switch electronics. 
The location aids are designed for a minimum operating life of 
72 hours and are considered usable up to 20 times by refurbish¬ 
ment. The flashing light is an exception. It has an operating life 
of 280 hours. The battery is used only once. 


The SRB nozzle extensions are not recovered. 

The recovery crew retrieves the SRB’s, frustum/drogue 
chutes, and main aprachutes. The nozzles are plugged, dewatered, 
and towed back to the launch site. Each booster is removed from 
the water and components disassembled and washed with fresh 


and deionized water to limit salt water corrosion. The motor 
segments, igniter, and nozzle are shipped back to Thiokol for 
refurbishment. 

Each SRB incorporates range safety system which includes a 
battery power source, receiver/decoder, antennas, and ordnance. 

HOLD DOWN POSTS. Each solid rocket booster (SRB) has 
four hold-down posts that fit into corresponding support posts 
on the mobile launch platform. Hold-down bolts hold the SRB 
and launch platform posts together. Each bolt has a nut at each 
end, but only the top nut is frangible. It contains two NASA 
standard initiators (NSI’s), which are ignited at solid rocket 
motor ignition commands. 

When the two NSTs are ignited at each hold down, the 
hold-down bolt travels downward because of the release of ten¬ 
sion in the bolt (pre-tensioned prior to launch), NSI gas pressure, 
and gravity. The bolt is stopped by the stud deceleration stand, 
which contains sand. The SRB bolt is 711 millimeters (28 inches) 
long and is 88 millimeters (3.5 inches) in diameter. 

The solid rocket motor ignition commands are issued by the 
orbiter’s computers through the master event controllers (MEC’s) 
to the hold-down pyrotechnic initiator controllers (PIC’s) on the 
mobile launch platform. They provide the ignition to the hold¬ 
down NSI’s. The launch processing system (LPS) monitors the 
SRB hold-down PIC’s for low voltage during the last 16 seconds 
before launch. PIC low voltage will initiate a launch hold. 

SRB IGNITION. SRB ignition can occur only when a lock 
pin from each SRB safe and arm device has been removed. The 
ground crew removes the pin during pre-launch activities. The 
solid rocket motor ignition commands are issued when the three 
Space Shuttle main engines (SSME’s) are at or above 90 percent 
rated thrust, no SSME fail and/or SRB ignition PIC low voltage is 
indicated, and there are no holds from the LPS. 
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UTC Liberty 


The solid rocket motor ignition commands are sent by the 
orbiter computers through the MEC’s to the safe and arm device 
NSI’s in each SRB. A PIC single-channel capacitor discharge 
device controls the firing of each pyrotechnic device. Three 
signals must be present simultaneously for the PIC to generate 
the pyro firing output. These signals - Arm, Fire 1, and Fire 2 - 
originate in the orbiter computers and are transmitted to the 
MEC’s. The MEC’s reformats them to 28 Vdc signals for the 
PIC’s. The “arm” signal charges the PIC capacitor to 40 Vdc 
(minimum of 20 Vdc). 


) 


) 


Ground Orbiter 



Solid Rocket Ignition, Hold-Down Release, 
and Umbilical Retract Commands 


The “arm” signal causes a barrier rotor to move into a posi¬ 
tion from which redundant NSI’s fire through a thin barrier seal 
down a flame tunnel. This ignites a pyro booster charge, which is 
retained in the safe the arm device behind a perforated plate. The 
booster charge ignites the propellant in the igniter initiator, and 
combustion products of this propellant ignite the solid rocket 
motor initiator, which fires down the length of the solid rocket 
motor igniting the solid rocket motor propellant. 

The computer launch sequence also controls certain critical 
main propulsion system valves and monitors the engine-ready 
indications from the main engines. The MPS start commands are 
issued by the onboard computers at T minus 6.6 seconds 
(staggered start - engine three, engine two, engine one — all 
approximately within one-fourth of a second) and the sequence 
monitors the thrust buildup of each engine. All three engines 
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Solid Rocket Motor 
Chamber Pressure 
Transducer (3) 



must reach the required 90 percent thrust within 3 seconds or an 
orderly shutdown is commanded up to 4.6 seconds and safing 
functions are initiated. 


Normal thrust build-up to the required 90-percent thrust 
level will result in the engines being commanded to the liftoff 
position at T minus 3 seconds as well as the Fire 1 command 
being issued to arm the SRB’s. At T minus 3 seconds, the vehicle 
base bending load modes are allowed to initialize (movement of 
approximately 650 millimeters [25-1/2 inches] measured at the 
tip of the external tank - with movement towards the external 
tank). 




At T-0, the two SRB’s are ignited, under command of the 
four onboard computers, separation of the four explosive bolts 
on each SRB is initiated (each bolt is 711 millimeters - 28 inches- 
long and 88 millimeters - 3.5 inches - in diameter); the two 
T-0 umbilicals (one on each side of the spacecraft) are retracted; 
the onboard master timing unit, event timer, and mission event 
timers are started; the three SSME’s are at 100 percent and the 
ground launch sequence is terminated. 

The solid rocket motor thrust profile is tailored to reduce 
thrust during the maximum dynamic pressure (max q) region. 

ELECTRICAL POWER DISTRIBUTION. Electrical power 
distribution in each SRB consists of orbiter-supplied main dc bus 
power to each SRB via SRB buses A, B, and C. The orbiter main 
dc buses A, B, and C supply main dc bus power to the respective 
SRB buses A, B, and C. In addition, orbiter main dc bus C sup¬ 
plies backup power to SRB buses A and B, and orbiter bus B 
supplies backup power to SRB bus C. This electrical power dis¬ 
tribution arrangement allows all SRB buses to remain powered in 
the event one orbiter main bus fails. 

The nominal dc voltage is 28 Vdc with an upper limit of 
32 Vdc and lower limit of 24 Vdc. 

HYDRAULIC POWER UNITS. There are two self- 
contained, independent hydraulic power units (HPU) on each 
SRB. Each HPU consists of an auxiliary power unit (APU), 
fuel supply module (FSM), hydraulic pump, hydraulic reservoir, 
and hydraulic fluid manifold assembly. The APU’s are hydrazine- 
fueled and generate mechanical shaft power to a hydraulic pump 
that produces hydraulic pressure for the SRB hydraulic system. 
The two separate HPU’s and two hydraulic systems are located 
on the aft end of each SRB, between the SRB nozzle and aft 
skirt. The HPU components are mounted on the aft skirt 
between the rock and tilt actuators. The two systems operate from 
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just before launch until SRB jettison. The two independent hy¬ 
draulic systems are connected to the rock and tilt servoactuators. 

The APU controller electronics are located in the SRB aft 
integrated electronic assemblies (IEA’s) on the aft external tank 
attach rings. 

The APU’s and their fuel systems are isolated from each 
other. Each fuel supply module (tank) contains 9.9 kilograms 
(22 pounds) of hydrazine. The fuel tank is pressurized with gas¬ 
eous nitrogen at 20,700 millimeters of mercury (MMHg) (400 psi) 
which provides the force to expel (positive expulsion) the fuel 
from the tank to the fuel distribution line, maintaining a positive 
fuel supply to the APU throughout its operation. 
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the fuel and creates a hot gas and feeds the hot gas exhaust 
product to the APU two-stage gas turbine. Fuel flows primarily 
through the startup bypass line until the APU speed is such that 
the fuel pump outlet pressure is greater than the bypass line. 
Then all the fuel is supplied to the fuel pump. 

The APU turbine assembly provides mechanical power to 
the APU gearbox. The gearbox drives the APU fuel pump, 
hydraulic pump, and lube oil pump. The APU lube oil pump 
provides oil lubrication of the gearbox. The turbine exhaust of 
each APU flows over the exterior of the gas generator, cooling it, 
and is then directed overboard through an exhaust duct. 

When the APU speed reaches 100-percent, the APU primary 
control valve closes, and the APU speed is controlled by the APU 
controller electronics. If the primary control valve logic fails to 
the “open” state, the secondary control valve assumes control of 
the APU at 112-percent speed. 

Each HPU is connected to both servoactuators on that SRB. 
One HPU serves as the primary hydraulic source for the servo- 
actuator and the other HPU serves as the secondary hydraulics 
for the servoactuator. Each servoactuator has a switching valve 
that allows the secondary hydraulics to power the actuator if the 
primary hydraulic pressure drops below 106,087 mmHg 
(2050 psi). A switch contact on the switching valve will close 
when the switching valve is in the secondary position. When the 
valve is closed, a signal is sent to the APU controller that inhibits 
the 100-percent APU speed control logic and enables the 
100-percent APU speed control logic. The 100-percent APU 
speed enables one APU/HPU to supply sufficient operating 
hydraulic pressure to both servoactuators of that SRB. 

The APU 100-percent speed corresponds to 72,000 rpm of 
the APU, 110-percent to 72,200 rpm, and 112-percent to 
80,640 rpm. 


The hydraulic pump speed is 3600 rpm and supplies 
hydraulic pressure of 157,837 plus or minus 2587 mmHg(3050 
plus or minus 50 psi). A high-pressure relief valve provides over¬ 
pressure protection to the hydraulic system and relieves at 
188,887 mmHg (3650 psi). 

The APU’s/HPU’s and hydraulic systems are reusable for 
20 missions. 

THRUST VECTOR CONTROL. Each SRB has two 
hydraulic gimbal servoactuators: one for rock and one for tilt. 
The servoactuators provide the force and control to gimbal the 
nozzle for thrust vector control. 
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The Space Shuttle ascent thrust vector control (ATVC) 
portion of the flight control system directs the thrust of the 
three Shuttle main engines and the two SRB nozzles to control 
Shuttle attitude and trajeetory during liftoff and ascent. Com¬ 
mands from the guidance system are transmitted to the ATVC 
drivers, which transmit signals proportional to the commands to 
each servoactuator of the main engines and SRB’s. Four indepen¬ 
dent flight control system channels and four ATVC channels 
control six main engine and four SRB ATVC drivers, with each 
driver controlling one hydraulic port on each main and SRB 
servoactuator. 

Each SRB servoactuator consists of four independent, two- 
stage servovalves that reeeive signals from the drivers. Each servo¬ 
valve controls one power spool in each actuator, which positions 
an actuator ram and the nozzle to control the direction of thrust. 

The four servovalves in each actuator provide a force- 
summed majority voting arrangement to position the power 
spool. With four identical commands to the four servovalves, the 
actuator force sum aetion prevents a single erroneous command 
from affecting power ram motion. If the erroneous command 
persists for more than a predetermined time, differential pressure 
sensing activates a selector valve to isolate and remove the defec¬ 
tive servovalve hydraulic pressure, permitting the remaining chan¬ 
nels and servovalves to control the actuator ram spool. 

Failure monitors are provided for each channel to indicate 
which channel has been bypassed. An isolation valve on each 
channel provides the capability of resetting a failed or bypassed 
channel 

Each actuator ram is equipped with transducers for position 
feedback to the thrust vector control system. Within each servo¬ 
actuator ram is a splashdown load relief assembly to cushion the 
nozzle at water splashdown and prevent damage to the nozzle 
flexible bearing. 


SRB RATE GYRO ASSEMBLIES. Each SRB contains three 
rate gyro assemblies (RGA’s), with each RGA containing one 
pitch and one yaw gyro. These provide an output proportional 
to angular rates about the pitch and yaw axis to the orbiter 
computers and guidance, navigation, and control system during 
first-stage ascent flight in conjunction with the orbiter roll rate 
gyros until SRB separation. At SRB separation, a switchover is 
made from the SRB RGA’s to the orbiter RGA’s. 

The SRB RGA rates pass through the flight aft multiplexer/ 
demultiplexers (MDM’s) to the orbiter computers. The RGA 
rates are then mid-value selected in redundancy management 
(RM) to provide one rate from each SRB pitch and yaw rate 
gyro (left and right SRB) to the user software. The RGA’s are 
designed for 20 missions. 

SRB SEPARATION. SRB separation is initiated when the 
three solid rocket motor chamber pressure transducers are 
processed in the redundancy management middle value select and 
the head-end chamber pressure of both SRB’s is less than or 
equal to 2,587 mmHg (50 psi). A backup cue is the time-elapsed 
from booster ignition. 

The separation sequence is initiated, commanding the thrust 
vector control actuators to the null position and putting the main 
propulsion system into a second-stage configuration (at 0.8 sec¬ 
onds from sequence initialization) that ensures the thrust of each 
SRB is less than 444,800 newtons (100,000 pounds). Orbiter yaw 
attitude is held for four seconds, while SRB thrust drops to less 
than 266,800 newtons (60,000 pounds). 

The SRB’S separate from the external tank within 30 milli¬ 
seconds of the ordnance firing command. 

The forward attachment point consists of a ball (SRB) and 
socket (ET) held together by one bolt. The bolt contains one NSI 
at each end. It is noted that the forward attachment point also 
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Legend 


ET - External Tank LH - Left Hand 

IEA - Integrated Electronic Assembly MDM - Multiplexer/Demultiplexer 

FA - Flight Aft RH - Right Hand 
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Solid Rocket Motor Chamber Pressure Data Flow 






























































































) A ) 



) 



"Separation Commands: Arm, Fire 1, Fire 2 


Legend 

BSM - 
CDF - 
IEA - 
MEC - 


Booster Separation Motor NSI 

Confined Detonator Fuse R 

Integrated Electronic Assembly SW 

Master Event Controller 


NASA Standard Initiator 

Right 

Switch 


77 


SRB Separation System 













































































































































































Space Transportation System 



carries the range safety system (RSS) cross-strap wiring connect¬ 
ing each SRB RSS and the ET RSS with each other. 

The aft attachment points consist of three separate struts: 
upper, diagonal, and lower. Each strut contains one bolt with an 
NS1 at each end. The upper strut also carries the umbilical inter¬ 
face between its SRB and the external tank and on to the orbiter. 

There are four booster separation motors (BSM’s) on each 
end of each SRB. The BSMTs separate the SRB’s from the exter¬ 
nal tank. The solid rocket motors in each cluster of four are 
ignited by firing redundant NS I s into redundant confined deto¬ 
nating fuse manifolds. 

The separation commands issued from the orbiter by the 
SRB separation sequence initiate the redundant NSI’s in each 
bolt and ignite the BSM’s to effect a clean separation. 

RANGE SAFETY SYSTEM. The Shuttle vehicle has three 
range safety systems (RSS’s). One is located in each SRB and one 
in the external tank. Any one, or all three, is capable of receiving 
two command messages (arm and fire) transmitted from the 
ground station. The RSS is used only when the Shuttle vehicle 
violates a launch trajectory red line. 

An RSS consists of two antenna couplers, command 
receivers and command decoders, a dual distributor, a safe and 
arm device with two NSI’s, two confined detonator fuse (CDF) 
manifolds, and two linear shaped charges (LSC’s). 

The antenna couplers provide the proper impedance for 
radio frequency (RF) and ground support equipment (GSE) 
commands. The command receivers are tuned to RSS command 
frequencies and provide the input signal to the distributors when 
an RSS command is sent. The command decoders use a coded 
plug to prevent any RF signal other than the proper RF signal 


( 


from getting into the distributors. The distributors contain tiie 
logic to supply valid destruct commands to the RSS pyrotechnics. 


The NSFs provide the spark to ignite the CDF, which, in 
turn ignites the LSC for Shuttle vehicle destruction. The safe 
and arm device provides mechanical isolation between the NSFs 
and the CDF during prelaunch and during the SRB separation 
sequence. 

The first message called arm allows the onboard logic to 
enable a destruct and illuminates a light on the flight deck dis¬ 
play and control panel at the CDR and PILOT station. The 
second message transmitted is the fire command. 

The SRB distributors in the SRB’s and the ET are cross- 
strapped together. Thus, one arm and/or destruct signal received 
by one SRB will provide the arm and/or destruct signals to the 
other SRB and the external tank. 

Electrical power from the RSS battery in each SRB is 
routed to RSS system A. The recovery battery in each SRB is 
used to power RSS system B, as well as the recovery system in 
that SRB. The SRB RSS is powered down during the separation 
sequence, and the recovery system for that SRB is powered up. 

SRB DESCENT AND RECOVERY. During the descent 
portion of the trajectory, the SRB’s achieve a nose-up trim 
condition. 

Approximately 220 seconds after separation and when the 
altitude switch senses an atmospheric pressure corresponding to 
approximately 4693 meters (15,400 feet), a nose cap initiator 
fires, and the energy is sent through confined detonating fuse 
manifold and assemblies to three thrusters on the top ring of the 
frustum. The nose cap is jettisoned, which fires a pyrotechnic 
charge to deploy a 3.5-meter-diameter (11.5-foot) conical, 
ribbon, pilot chute with a 5.4-meter (18-foot) suspension line 
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Safe Position Arm Position 

Legend (Center Shaft Rotated 90°) 


CDF - Confined Detonating Fuse 
NSI - NASA Standard Initiator 

Range Safety System Safe and Arm Device 
(Simplified) 


and 9.7-meter (32-foot) riser line, which then strips the pilot bag 
and extracts the drogue parachute. 

The drogue chute. 16 meters (54 feet) in diameter with 12 
30-meter (100-foot) suspension lines, slows the booster’s descent. 
The drogue disreefs to full inflation approximately 234.3 seconds 
after separation at an altitude of approximately 2834 meters 
(9300 feet). It withstands a load of 122.472 kilograms (270.000 
pounds) and weighs 544 kilograms (1 200 pounds). 


) 


) 



The RSS and recovery 
batteries are located in 
the forward skirt 
of each SRB. 


(For reference only. 
Frustum lands separately 
from SRB and is 
recovered.) 
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SRB Battery Power 


Approximately 241.4 seconds after separation, another 
initiator fires, and its energy is sent through a confined detonating 
fuse to a linear-shaped charge, which separates the frustum and 
drogue chute and strips the main parachute bags. This occurs at 
about 2011 meters (6600 feet). 

The three main parachutes also are conical ribbon types. 
They are 35 meters (115 feet) in diameter with 48 40-meter 
(132-foot) suspension lines and 8 12-meter (40-foot) riser lines. 
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At approximately 261.9 seconds and an altitude of 6707 meters 
(2200 feet), the three main parachutes reach full open. Each 
withstands a load of 81,648 kilograms (180,000 pounds) and 
weighs 680 kilograms (1500 pounds). The parachutes are made 
of nylon ribbons about 50 millimeters (2 inches) wide. The 
horizontal, vertical, and radial ribbons are about as thick as can¬ 
vas but structural members are about as thick as military webb 
belts. 


At approximately 20 seconds after deployment of main 
chutes, a linear-shaped charge severs the nozzle extension. 

The velocity of each SRB at water impact, about 281 sec¬ 
onds after separation, is approximately 26 meters (87 feet) per 
second. With the SRB descending aft end first, air in the now 
empty (burned out) motor casing is trapped and compressed, 
causing the booster to float with the forward end out of the 
water after splashdown. 

At impact, the main parachutes are released, and a towing 
pendant is deployed. The pendant may also be deployed man¬ 
ually by the SRB recovery crew. On the first two Space Shuttle 
flights, one main parachute was not disconnected, and a 12- 
meter (40-foot) riser attached to one of the main parachutes 
will be used for towing. The parachutes are designed for reuse 
on 10 missions. 

The radio transponder in each SRB has a range of 8.9 
nautical miles (10.35 statute miles), and the flashing light has a 
night-time range of 4.9 nautical miles (5.75 statute miles), with 
10 power optical aids with wave heights of 2.9 meters (9.5 feet). 
The flashing light is activated upon water impact. 

Each frustum/drogue chute has an RF transmitter with a 
range of 8.9 nautical miles (10.35 statute miles) and a flashing 
light with a night time range of 4.9 nautical miles (5.75 statute 


Main Chute 

Release CDF Frangible Release 

Manifold Separation Nut (6) 



VHF Antenna in 
Extended Position' 


Frustum Location Aids 

SRB Parachute Disconnect and Recovery Aids 


Separation 
Plane^ 



miles) with wave heights of 2.9 meters (9.5 feet). The flashing 
light is activated upon water impact. 


The main parachutes have an RF transmitter with a range of 
8.9 nautical miles (10.35 statute miles) and a flashing light with a 
nigh-time range of 4.9 nautical miles (5.75 statute miles) with 
wave heights of 2.9 meters (9.5 feet). The flashing light is acti¬ 
vated upon water impact. In addition, sonar beacons are used 
with a range of 2.9 nautical miles (3.45 statute miles). 
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Various parameters of SRB operation are monitored and 
displayed on the orbiter flight deck control and display panel and 
are transmitted to ground telemetry. 

CONTRACTORS. Thiokol Chemical Corp., Wasatch Divi¬ 
sion Brigham City, Utah, is prime contractor for the solid-rocket 
booster motors. Other contractors include McDonnell Douglas 
Astronautics Co., Huntington Beach, Calif. (SRB structures); 
United Space Boosters Inc., Sunnyvale, Calif. (SRB checkout, 
assembly, launch, and refurbishment, except for motors); Pioneer 
Parachute Co., Manchester, Conn, (parachutes); Abex Corp., 
Oxnard, Calif, (hydraulic pumps); Arde Inc., Mahwah, N.J. 
(hydrazine fuel modules); Arkwin Industries Inc., Westbury, N.Y. 


(hydraulic reservoirs); Aydin Vector Division, Newtown, Pa. 
(integrated electronic assemblies); Bendix Corp., Teterboro, N.J. 
(integrated electronic assemblies); Consolidated Controls Corp., 
El Segundo, Calif, (fuel isolation valves, hydrazine); Eldec Corp., 
Lynnwood, Wash, (integrated electronic assemblies); Explosive 
Technology, Fairfield, Calif. (CDF manifolds); Martin Marietta, 
Denver, Colo, (pyro initiator controllers); Moog Inc., East 
Aurora, N.Y. (servoactuators); Sperry Rand Flight Systems, 
Phoenix, Ariz. (multiplexers/demultiplexers); Teledyne, 
Lewisburg, Tenn. (location aid transmitters); United Technology 
Corp., Sunnyvale, Calif, (separation motors); Sundstrand, 
Rockford, Ill. (auxiliary power units); Motorola Inc., Scottsdale, 
Ariz. (range safety receivers). 


84 


EXTERNAL TANK 


The external tank contains the liquid hydrogen fuel and 
liquid oxygen oxidizer and supplies them under pressure to the 
three main engines in the orbiter during liftoff and ascent. When 
the main engines are shut down the external tank is jettisoned, 
enters the earth’s atmosphere, breaks up, and impacts in a remote 
ocean area. It is not recovered. 

The largest and heaviest (when loaded) element of the Space 
Shuttle, the external tank, has three major components; the 
forward liquid oxygen tank, an unpressurized intertank which 
contains most of the electrical components, and the aft liquid 
hydrogen tank. The external tank is 47 meters (154.2 feet) long 
and has a diameter of 8.38 meters (27.5 feet). It weighs 
approximately 33,503 kilograms (73,861 pounds) empty and 
743,253 kilograms (1,638.565 pounds) full [604,195 kilograms 
(1,332,000 pounds) of LO 2 and 101,606 kilograms (224,000 
pounds) of LH 2 ]. 


< 


The external tank is attached to the orbiter at one point 
forward attachment and two points aft. In the aft attachment 
area, there are also umbilicals which carry fluids, gases, electrical 
signals, and electrical power between the tank and the orbiter. 
Electrical signals and controls between the orbiter and the two 
solid-rocket boosters also are routed through those umbilicals. 

The LO 2 tank is an aluminum monocoque structure 
composed of a fusion-welded assembly of preformed, chem- 
milled gores, panels, machined fittings, and ring chords. It 
operates in a pressure range of 1,035 to 1,138 mmHg (20 to 
22 psi). The tank contains antislosh and antivortex provisions to 
minimize liquid residuals and for damping fluid motion. An 
antigeyser system line is installed to prevent geysering of the 
LO 2 . The antigeyser system consists of a 101 millimeter (4 inch) 
diameter line in parallel with the 431 millimeter (17 inch) 
diameter LO 2 feedline, which provides a convection flow loop to 
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Propellant Feed, 
Pressurization Lines 
and Electrical 
Umbilicals 


LO 2 Vent 
Valve and 
Fairing 



Gross Liftoff Weight 
Inert Weight 
LO 2 Nominal 
Usable 

LH 2 Nominal 
Usable 


47 m (154.2 ft) 

8.38 m (27.5 ft) 

743,253 kg (1,638,565 lb) 
33,503 kg (73,861 lb) 
604,195 kg (1,332,000 lb) 
528,473 liters (139,623 gal) 
101,606 kg (224,000 lb) 
1,432,161 liters (378,378 gal) 


External Tank 


(All Weights Approximate) 


maintain cold LO 2 in the feedline. The tank feeds into a 431 
millimeter (17 inch) diameter feedline which conveys the LO 2 
through the intertank, then external to the ET to the aft right 
hand ET/orbiter disconnect umbilical. The 431 millimeter (17 
inch) diameteer feedline permits LO 2 flow of 71,979 liters per 
minute (19,017 gallons per minute). The LO 2 tank’s double 


wedge nose cone reduces drag, heating, contains the vehicle’s 
ascent air data system, and serves as a lightning rod. The LCb 
tank volume is 552 cubic meters (19,495 cubic feet). Its diameter 
is 8,407 millimeters (331 inches), its length is 16,649 millimeters 
(655.5 inches) and the empty weight of 5,647 kilograms (12,450 
pounds). 
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Forward Thrust 
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)SRB FORWARD THRUST 
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Left 
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(2) ORBITER AFT ATTACHMENTS 



Orbiter - External Tank Attachment Points 


The intertank is a steel/aluminum semi-monocoque cylin¬ 
drical structure with flanges on each end for joining the LO 2 
and LH 2 tanks. The intertank houses the ET instrumentation 
components and provides an umbilical plate that interfaces with 
the ground facility arm for purge gas supply, hazardous gas 
detection, and hydrogen gas boiloff during ground operations. 
It consists of mechanically joined skin, stringers, and machined 
panels of aluminum alloy. The intertank is vented during flight. 
The intertank contains the forward SRB-external tank attach 
thrust beam and fittings which distribute the SRB loads to the 
LO 2 and LH 2 tanks. The intertank is 6,858 millimeters (270 
inches) long and weighs 6,259 kilograms (13,800 pounds). 

The LH 2 tank is an aluminum semimonocoque structure of 
fusion-welded barrel sections, five ring frames, and forward and 
aft ellipsoidal domes. Its operating pressure range is 1656 to 
1759 mmHg (32 to 34 psi). The tank contains an antivortex 
baffle and siphon outlet to transmit the LH 2 from the tank 
through a 431-millimeter-diameter (17 inch) line to the left aft 
umbilical. The LH 2 feedline flow rate is 184,420 liters per 
minute (48,724 gallons per minute). The LH 2 tank provides at 
its forward end the ET/orbiter forward attach pod strut and at its 
aft end the two ET/orbiter aft attach ball fittings, as well as the 
aft SRB-external tank stabilizing strut attachments. The LH 2 
tank is 8,407 millimeters (331 inches) in diameter, 29,489 
millimeters (1161 inches) long, has a volume of 1,573 cubic 
meters (55,552 cubic feet) and a dry weight 14,451 kilograms 
(31,860 pounds). 


The external tank is covered with a 12.7-millimeter (0.5- 
inch) cork/epoxy composition sprayed or premolded to with¬ 
stand localized high heating during boost. It is then covered with 
a 25- to 50-millimeter (one- to two-inch) spray-on foam 
insulation. The LH 2 tank insulation also precludes liquid air 
formation on the external surface. 
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Each propellant tank has a vent and relief valve at its 
forward end. This dual-function valve can be opened by GSE- 
supplied helium for the vent function during prelaunch and can 
open during flight when the ullage (empty space) pressure of the 
Lib reaches 1242 mmHg (24 psi) or the ullage pressure of the 
LCb tank reaches 1863 mmHg (36 psi). 

The LCb tank contains a separate pyroteclmically-operated 
propulsive, tumble vent valve at its forward end. At separation, 
the LCb tumble vent valve is opened, providing impulse to assist 
in the separation maneuver and more positive control of the 
entry aerodynamics of the external tank. 

There are eight propellant depletion sensors, four each for 
fuel and oxidizer. The fuel depletion sensors are located in the 
bottom of the fuel tank. The oxidizer sensors are mounted in the 
orbiter LCb feedline manifold downstream of the feedline 
disconnect. During main engine thrusting, the orbiter computers 
constantly compute the instantaneous mass of the vehicle due to 
the usage of the propellants. Normally, main engine cutoff 
(MECO) is based on a predetermined velocity; however, if any 
two of the fuel or oxidizer sensors sense a dry condition, the 
engines will be shut down. 

Location of the LCb sensors allow the maximum amount of 
oxidizer to be consumed in the engines, while allowing sufficient 
time to shut down the engines before the oxidizer pumps cavitate 
(run dry). In addition, 498 kilograms (1100 pounds) of LH 2 are 
loaded over and above that required by 6:1 oxidizer/fuel engine 
mixture ratio. This assures that main engine cutoff from the 
depletion sensors is fuel-rich: oxidizer-rich engine shutdowns can 
cause burning and severe erosion of engine components. 

Four pressure transducers located at the top end of the LCb 
and LH 2 tanks monitor the ullage pressures. 


Each of the two aft external tank umbilical plate mates with 
a corresponding plate on the orbiter. The plates help maintain 
alignment among the umbilicals. Physical strength at the umbili¬ 
cal plates is provided by bolting corresponding umbilical plates 
together. When the orbiter computers command external tank 
separation, the bolts are severed by pyrotechnic devices. 

The external tank has five propellant umbilicals that 
interface with orbiter umbilicals: two for the LCb tank and three 
lor the LH 2 tank. One of the LO 2 tank umbilicals is for liquid 
oxygen, the other for gaseous oxygen. The Lib tank umbilical 
has two for liquid and one for gas. The smaller-diameter LH 2 
umbilical is a recirculation umbilical used only during Lfb 
chilldown sequence in prelaunch. 


The external tank also has two electrical umbilicals, which 
carry electrical power from the orbiter to the tank and the two 
solid-rocket boosters and provide information from the SRB’s 
and external tank to the orbiter. 

A swing-arm-mounted cap to the fixed service structure 
covers the oxygen tank vent on top of the external tank during 
the countdown and is retracted about two minutes prior to 
liftoff. The cap will siphon off oxygen vapor that threatened to 
form large ice on the external tank, thus protecting the orbiter’s 
thermal protection system during launch. 

A range safety system provides a means for destructively 
dispersing the propellants. It includes a battery power source, 
a receiver/decoder, antennas, and ordnance. 

Various parameters are monitored and displayed on the 
flight deck display and control panel and are transmitted to the 
ground. 
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The contractor for the external tank is Martin Marietta 
Aerospace. Denver. Colo., the tank is manufactured at Michoud, 


La. Motorola Inc., Scottsdale, Ariz., is the contractor for range 
safety receivers. 


88 


MAIN PROPULSION SYSTEM 


The main propulsion system (MPS). assisted by the two solid 
rocket boosters (SRB’s) during the initial phases of the ascent 
trajectory, provides the velocity increment (AV) from lift-off to 
a predetermined velocity increment (AV) prior to orbit insertion. 
After the two SRB’s are expended and jettisoned, the MPS 

( 


continues to thrust until the predetermined velocity is achieved. 
At that time main engine cutoff (MECO) is initiated. The 
external tank (ET) is jettisoned, and the orbital maneuvering 
system (OMS) is ignited to provide the final AV for orbital 
insertion. The magnitude of the AV supplied by the OMS 

( ( 







































Space Transportation System 



depends on payload weight, mission trajectory, and system 
limitations. 

Coincident with the start of the OMS thrusting maneuver 
(settles the MPS propellants), the remaining liquid oxygen 
propellant is dumped through the bells of the three space Shuttle 
main engines (SSME’s). At the same time, the remaining liquid 
hydrogen propellant is dumped overboard through the hydrogen 
fill and drain valves for six seconds, when the hydrogen inboard 
fill and drain valve is closed and the hydrogen recirculation valve 
is opened. The hydrogen flows through the hydrogen engine 
bleed valves to the orbiter hydrogen MPS line between the 
inboard and outboard hydrogen fill and drain valves, and the 
remaining hydrogen is dumped through the outboard fill and 
drain valve for approximately 100 seconds. 

During on-orbit operations, the flight crew will vacuum-inert 
the MPS by opening valves that allow remaining propellants to be 
vented to space. 

Prior to entry, the flight crew repressurizes the MPS 
propellant lines with helium to prevent contaminants from being 
drawn into the lines during entry. It is also used to purge the 
spacecraft aft fuselage. The last activity of the MPS occurs at the 
end of landing rollout. At that time the helium remaining in the 
onboard helium storage tanks is released into the MPS to provide 
an inert atmosphere for safety. 

The MPS consists of the following major subsystems: three 
SSME’s, three SSME controllers, external tank, orbiter MPS 
propellant management subsystems and helium subsystem, four 
ascent thrust vector control (ATVC) units, and six SSME 
hydraulic servactuators. 

The main engines are reusable, high-performance liquid- 
propellant rocket engines with variable thrust. The propellant 


> 
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fuel is liquid hydrogen (LHo) and the oxidizer is liquid oxygen 
(LO 2 ). The propellant is carried in separate tanks in the external 
tank and supplied to the main engine under pressure. Each engine 
can be gimbaled plus or minus 10.5 degrees in pitch and plus or 
minus 8.5 degrees in yaw for thrust vector control by 
hydraulically powered gimbal actuators. 

The main engines can be throttled over a range of 65 to 
109 percent of their rated power level (RPL) in one-percent 
increments. In the development flights, the throttling range will 
be 65 to 100 percent. A value of 100 percent corresponds to a 
thrust level of 1,668,000 Newtons (375,000 pounds) at sea level 
and 2,090,560 Newtons (470,000 pounds) in a vacuum. RPL 
corresponds to a thrust chamber pressure of 153,180 mmHg 
(2,960 psia). 


At sea level, the engine throttling range is reduced due to 
flow separation in the nozzle, prohibiting operation of the engine 
at its 65-percent throttle setting, referred to as minimum power 
level (MPL). All three main engines receive the same throttle 
command at the same time. Normally these come automatically 
from the general-purpose computers through the engine control¬ 
lers. During certain contingency situations, manual control of 
engine throttling is possible by use of the speedbrake/engine 
throttle controller handle. The throttling ability reduces vehicle 
loads during maximum aerodynamic pressure, limits vehicle 
acceleration to 3 g’s maximum during boost, and makes it 
possible to abort with all main engines thrusting or one engine 
out. 


Each engine is designed for 7-1/2 hours of operation over a 
life span of 55 starts. Throughout the throttling range, the 
LO 2 -LH 2 mixture ratio is 6:1. Each nozzle area ratio is 77:5:1. 
The engines are 4.2 meters (14 feet) long and 2.4 meters (8 feet) 
in diameter at the nozzle exit. 
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MPS Subsystem 
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LH 2 Ground Umbilical Disconnect Panel 
LO 2 Ground Umbilical Disconnect Panel / ^2 Engine Inlet Line 

Engine No. 1 



LH 2 Supply Manifold 


Orbiter-External 
Tank LH 2 
Disconnect 


Engine No. 2 
(Left) 


Engine No. 3 H eat 
(Right) shield 


Engine Gimbal Bearing 
Fluid 


Interface I 


Thrust (per Engine): 

Sea Level 1,668,000 Newtons (375,000 lb) 
Vacuum 2,090,560 Newtons (470,000 lb) 


LH 2 Recirculation 
LO 2 Supply Manifold 
LH 2 Prevalve 
LO 2 Prevalve 

Orbiter External Tank LO 2 
Disconnect 

LO 2 Engine Inlet Line 
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Space Shuttle Main Engine 

The SSME controllers are a digital computer system elec¬ 
tronic packages mounted on the SSME’s. They operate in 
conjunction with engine sensors, valve actuators, and spark 
igniters to provide a self-contained system for monitoring engine 
control, checkout, and status. Each controller is attached to the 
forward end of the SSME. Engine data and status collected by 
each controller from the SSME are transmitted to the engine 
interface unit (EIU), which is mounted in the orbiter. There is 
one EIU for each SSME. 

The EIU transmitts commands from the orbiter computers to 
the main engine controller. When engine data and status are 
received by the EIU, the data are held in a buffer until an orbiter 
computer request for data is received by the EIU. 
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It is noted, that each of the three orbiter auxiliary power 
units (APU’s), provide mechanical shaft power through a gear 
train to drive a hydraulic pump. Each of the three hydraulic 
pumps, provide hydraulic pressure to its respective hydraulic 
system. The three orbiter hydraulic systems provide hydraulic 
pressure to position the SSME servoactuators for thrust vector 
control during the ascent phase of the mission in addition to 
other functions in the main propulsion system. 

The ascent thrust vector control (ATVC) receives commands 
from the orbiter computers and sends commands to the engine 
gimbal actuators. The ATVC’s are an electronics package (four in 
all) mounted in the orbiter’s aft fuselage avionics bays. Hydraulic 
isolation commands are directed to the engine gimbal actuators 
that have faulty servovalves as a result of excessive pressure. In 
conjunction with this, a servovalve isolation signal is transmitted 
to the computers. 

The SSME hydraulic servoactuators are used to gimbal the 
main engine. There are two actuators per SSME, one for pitch 
motion and one for yaw motion. They convert electrical 
commands received from the orbiter computers and position 
servovalves which direct hydraulic pressure to a piston that 
converts the pressure into a mechanical force that is used to 
gimbal the SSME’s. Hydraulic pressure status for each servovalve 
is transmitted to the ATVC. 

The orbiter MPS propellant management subsystem consists 
of manifolds, distribution lines, and valves by which the liquid 
propellants pass from the ET to the SSME’s and the gaseous 
propellants pass from the SSME’s to the ET. The SSME’s gaseous 
propellants provide ET pressurization. All the valves in the 
propellant management subsystems are under direct control of 
the orbiter computers and are either electrically or pneumatically 
actuated. 
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The orbiter MPS helium subsystem consists of a series of 
helium supply tanks and regulators, check valves, distribution 
lines, and control valves. The subsystem supplies helium used 
within the engine for purging the high pressure oxidizer 
turbopump intermediate seal, preburner oxidizer domes and 
actuating engine valves during emergency pneumatic shutdown. 
The balance of the helium is used to actuate all the 
pneumatically operated valves within the propellant management 
subsystem and to pressurize the propellant lines prior to reentry. 

EXTERNAL TANK 

The ET aft attachment struts connect the orbiter through a 
number of umbilicals that carry fluids, gases, signals, and 
electrical power between the tank and the orbiter. These 
umbilicals are collected into two bundles. Each bundle is 
permanently connected to the ET at one end physically 
supported by one of the rear attachment struts and terminated in 
an umbilical plate. Each ET umbilical plate mates with a 
corresponding orbiter umbilical plate. The plates help to main¬ 
tain alignment among the various connecting components. 
Physical strength at the joint is provided by bolting correspond¬ 
ing umbilical plates together. When the onboard computers 
command ET separation, the bolts are severed by pyrotechnic 
devices. 

At the forward end of each ET propellant tank is a vent and 
relief valve. This valve is a dual function valve: it can be opened 
by GSE-supplied helium (vent) or excessive tank pressure (relief). 
The vent is available only in prelaunch; once lift-off has occured, 
only the relief function is operable. The LCb (liquid oxygen) 
tank will relieve at an ullage pressure of 1242 millimeters of 
mercury (mmHg) (24 psi). The LH 2 (liquid hydrogen) tanks will 
relieve at an ullage pressure of 1863 mmHg (36 psi). The flight 
crew has no control over the position of the vent and relief valves 
in either prelaunch or ascent. Normal tank ullage pressure range 
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during ascent for the LH 2 tank is 1,656 to 1,759 mmHg (32 to 
34 psi) and for the LO 2 tank is 1,035 to 1,138 mmHg (20 to 
22 psi). During prelaunch, the LH 2 tank is pressurized to 
2,282 mmHg (44.1 psi) to meet the start requirement of the 
SSME low-pressure fuel turbopump (LPFT). 

In addition to the vent and relief valve, the LO 2 tank has a 
tumble vent valve that is opened at the ET separation sequence. 
The thrust force provided by opening the valve imparts an 
angular velocity to the ET to assist in the separation maneuver 
and provide more positive control of the ET reentry 
aerodynamics. 

There are eight propellant depletion sensors. Four of them 
sense fuel depletion, and four sense oxidizer depletion. The fuel 
depletions sensors are mounted in the ET LO 2 feedline manifold 
downstream of the tank. During prelaunch, the launch processing 
system (LPS) tests each propellant depletion sensor. If any are 
found to be in a failed condition, the LPS sets a flag in the 
computer SSME OPS (operational sequence) sequence logic 
which will instruct the computer to ignore the output of that 
particular sensor. During SSME engine thrusting, the computer 
constantly computes the instantaneous mass of the vehicle due to 
propellant usage from the ET. Vehicle mass constantly decreases. 
When the computed vehicle mass matches a predetermined 
initialized loaded value, the computer arms the propellant 
depletion sensors. After this time, if any two of the “good” fuel 
depletion sensors (those not flagged during prelaunch) or any 
two of the “good” oxidizer depletion sensors indicate “dry” 
condition, the computers issue a MECO command. This type of 
MECO is the backup to the nominal MECO, which is based on 
vehicle velocity. In a propellant depletion situation, the oxidizer- 
level sensors sense the condition before the fuel sensors to ensure 
that all depletion cutoffs are fuel rich since an oxidizer-rich 
cutoff can cause burning and severe erosion of engine compo- 
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nents. To ensure that oxidizer-level sensors sense depletion first, 
a plus 498-kilogram (1,100-pound) bias is included in the amount 
of LH 2 loaded in the ET. This amount is in excess of that 
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External Tank Schematic, LO2 Tank Detail 



External Tank Schematic LH2 Tank Detail 
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dictated by the 6:1 (oxidizer/fuel) mixture ratio. The position of 
the oxidizer propellant depletion sensors allows the maximum 
amount of oxidizer to be consumed in the engines and allows 
sufficient time to cut off the engines before the oxidizer 
turbopumps cavitate (run dry). 

Four ullage pressure transducers are located at the top end of 
each propellant tank (LO 2 and LH 2 ). One of the four is 
considered a spare and is normally offline. During prelaunch, the 
GSE will normally check out the four transducers and if one of 
the three active tranducers is determined to be “bad,” that 
transducer can be taken off line and the output of the spare 
transducer selected. The flight crew can also perform this 
operation after lift-off, via the computer keyboard; however, 
because of the short time involved from lift-off to MECO, this 
would probably be impractical. The three active ullage pressure 
sensors provide outputs for cathode-ray-tube (CRT) display and 
control of ullage pressure within their particular propellant tanks. 
For CRT display, computer processing selects the middle value 
output of the three transducers and displays this single value. For 
ullage pressure control, all three outputs are used. 

The ET has five propellant disconnects: two for the LO 2 
tank and three for the LH 2 tank. One of the LO 2 tank 
propellant umbilicals carries LO 2 , and the other carries gaseous 
oxygen (GO 2 ). The LH 2 tank has two disconnects that carry 
LH 2 and one that carries gaseous hydrogen (GF12)- The ET LH 2 
recirculation disconnect is the smaller of the two disconnects 
that carry LH 2 and is used only during the LH 2 chilldown 
sequence in prelaunch. 

The ET has two electrical umbilicals, each made of many 
smaller electrical cables. These cables carry electrical power from 
the orbiter to the ET and the two SRB’s and bring back to the 
orbiter telemetry from the SRB and ET. The operational 
instrumentation (01) and development flight instrumentation 
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(DFI) telemetry that comes back from the SRB’s is conditioned, 
digitized, and multiplexed in the SRB’s themselves. The DFI 
telemetry that returns from the ET is conditioned, digitized, and 
multiplexed in the ET; however, the ET 01 measurements that 
return to the orbiter are the “raw” transducer outputs and must 
be processed within the orbiter telemetry system. 

Oxidizer flow during prelaunch is GSE-supplied LO 2 and is 
loaded through the orbiter propellant management subsystem. It 
exits the orbiter at the LO 2 feedline disconnect valve and flows 
through the LO 2 umbilical into the LO 2 tank. Once the loading 
is completed, the LO 2 vent and relief valve in the ET is closed 
and the LO 2 tank is pressurized to 1,086 mmHg (21 psi) by 
GSE-supplied helium injected into the GO 2 pressurization line. 
During SSME thrusting, the LO 2 flows out of the ET, through 
the ET LO 2 umbilical, and enters the orbiter at the LO 2 feedline 
disconnect valve. Pressurization in the tank is maintained by GO 2 
tapped from the three SSME’s and supplied to the LO 2 tank 
through the ET GO 2 umbilical. The interface between the ET 
GO 2 umbilical and the orbiter is a self-sealing quick disconnect. 
The ET LO 2 umbilical, the ET GO 2 umbilical, and one ET 
electrical umbilical are grouped together in a single bundle and 
connect to the orbiter at the right-hand orbiter umbilical plate. 

Fuel flow during prelaunch is GSE-supplied LH 2 and is 
loaded through the orbiter propellant management subsystem. It 
exits the orbiter at the LH 2 feedline disconnect valve and flows 
through the ET LH 2 umbilical in the LH 2 tank. Once loading is 
complete, the LH 2 vent and relief valve in the ET is closed, and 
the LH 2 tank is pressurized to 2,199 mmHg (42.5 psi) by 
GSE-supplied helium injected into the GH 2 pressurization line. 
Approximately 45 minutes before SSME start, three electrically 
powered LH 2 pumps in the orbiter begin to circulate the LH 2 
out of the ET, through the three SSME’s, back to the ET via a 
special ET LH 2 recirculation umbilical. This recirculation chills 
down all the LH 2 lines between the ET and the high-pressure fuel 
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turbopump (HPFT) in the SSME so that the path is free of any 
GH? bubbles and is at the proper temperature for engine start. 
LH7 recirculation ends approximately six seconds before engine 
start. During engine thrusting, LH2 flows out of the ET and 
through the ET LEb umbilical and enters the orbiter at the LH2 
feedline disconnect valve. Tank pressurization is maintained by 
GEb tapped from the three SSME’s and supplied to the LH2 
tank through the ET GH2 umbilical. The interface between the 
ET GH2 umbilical, and the orbiter is a self-sealing quick discon¬ 
nect. The ET LH2 umbilical, the ET LH2 recirculation umbilical, 
the ET GH2 umbilical, and one electrical umbilical are grouped 
together in a single bundle and connected to the orbiter at the 
left-hand orbiter umbilical plate. 

ORBITER PROPELLANT MANAGEMENT SUBSYSTEM 

During engine thrusting, propellants under ET tank pressure 
flow from the ET to the orbiter through two umbilicals: one for 
LEb and the other for LO2. Within the orbiter, the propellants 
pass through a system of manifolds, distribution lines, and valves 
to the main engines. The valves within the orbiter are under 
direct control of the orbiter computers and are electrically or 
pneumatically actuated. This system also provides a path that 
allows gases tapped from the three SSME’s to flow back to the 
ET through two gas umbilicals to maintain pressures in the fuel 
and oxidizer tanks. During prelaunch this system is used to 
control the loading of propellants in the ET. During orbit it 
controls propellant dump, vacuum inerting, and, prior to entry, 
system repressurization. 

The two 431 -millimeter-diameter ( 17 -in.) propellant feedline 
manifolds in the orbiter, one for LCD and one for LH2, have a 
feedline disconnect valve at one end and two fill and drain valves, 
one inboard, and one outboard, connected in series at the other 
end. The feedline manifolds connect to the ET liquid propellant 
umbilicals at the feedline disconnect valve and to either GSE 
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liquid propellant umbilicals (prelaunch only) or overboard at the 
outboard fill and drain valves. Between the feedline disconnect 
valves and the inboard fill and drain valves are three outlets for 
the three engine propellant feedlines and one outlet for the 
propellant feedline relief valve. The LH2 feedline manifold 
contains an extra outlet for the LH2 RTLS (return to launch 
site) feedline dump line. Pressures within the LO2 and LH2 
feedline manifolds can be monitored on the two engine manifold 
(ENG MANF) meters on panel F 7 or on the CRT display. 

The six 304 -inillimeter-diameter ( 12 -in.) feedlines in the 
orbiter, three for LO2 and three for LH2, connect the LO2 
feedline manifold to each of the three engine low-pressure 
oxidizer turbopump (LPOT) inlets and connect the LH2 feedline 
manifold to each of the three engine low-pressure fuel 
turbopump (LPFT) inlets. There is one prevalve in each of the six 
engine propellant feedlines. The prevalves are designated as 
LEFT, CENTER, and RIGHT engine LO2 prevalve and LEFT, 
CENTER, and RIGHT engine LH2 prevalve. Each prevalve has its 
own switch on panel R 4 . Each switch has a GPC, OPEN, and 
CLOSE position. The GPC position allows automatic computer 
control of each prevalve, and the OPEN and CLOSE positions 
give the flight crew direct manual control of each valve. 

There are two 25 . 4 -millimeter-diameter ( 1 -in.) relief valves 
in the orbiter propellant management subsystem: one for LO2 
and one for LH 2 - Each line connects to one of the propellant 
feedline manifolds at one end and to an overload port at the 
other end. Each line contains a relief valve and an electrically 
actuated relief isolation valve. The isolation valve is mounted in 
series with, and upstream of, the relief valve. Flow through the 
relief line and relief valve is enabled by deenergizing the normally 
open isolation valve, allowing it to open. The position of the two 
relief isolation valves is controlled by its individual FEEDLINE 
RLF (relief) ISOL (isolation) switches on panel R 4 . Normally 
these switches are left in the GPC position. With the two switches 
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in the GPC position, both relief isolation valves are opened 
automatically after MECO. Each switch has an OPEN and 
CLOSE position, which allows the flight crew to control each 
valve individually. The relief lines and valves prevent excessive 
pressure buildups, generated by heatup and expansion of the 
propellants in the feedline manifolds, by allowing the pressure to 
be vented overboard. 

The single 50 -millimeter-diameter (2-in.) line which connects 
the LH2 feedline manifold to an overboard port on the outer aft 
fuselage’s left side, between the orbital maneuvering system 
(OMS) pod and the upper surface of the wing, is used for 
dumping residual LH2 during an RTLS abort. In non-RTLS 
situations, the pilot can use the backup LH2 dump switch to 
open these valves. Flow through the line is controlled by two 
series-connected, normally closed, LH2 RTLS dump valves-one 
inboard and one outboard in the line. The LH2 RTLS dump 
valves are controlled automatically by computer commands. 

PROPELLANT MANAGEMENT GASEOUS PROPELLANT 
COLLECTION AND SUPPLY NETWORK 

This network consists of all the lines used to collect and 
supply gaseous propellants, GO2 and GH2, for all three SSME’s 
to the ET to maintain propellant tank pressure during engine 
thrusting. 

There are six 16 -millimeter-diameter ( 0.63 in.) pressuriza¬ 
tion lines in the orbiter: three for GO2 and three for GH2. Each 
GO2 pressurization line connects to the oxidizer heat exchanger 
outlet on one SSME and to the GO2 ET pressurization 
manifold. 

Each GH2 pressurization line connects to the low-pressure 
fuel turbopump (LPFT) turbine outlet on one SSME and to the 
GH2 ET pressurization manifold. 
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Each of the six pressurization output lines contains two 
orifices connected in parallel and one flow control valve 
connected in series with one of the orifices. The combination of 
orifices and flow control valves is used to control the ullage 
pressure in the two ET propellant tanks. 

There are two 50 -millimeter-diameter (2 in.) manifolds in 
the orbiter: one for GO2 and one for GH2- At each end of both 
manifolds are self-sealing quick disconnects. The pressurization 
manifolds connect to the ET gaseous propellant umbilicals at one 
set of quick disconnects and to the GSE helium pressurization 
umbilicals at the other set of quick disconnects. The two GSE 
helium pressurization umbilicals are used for the initial pressuri¬ 
zation of the ET propellant tanks during prelaunch. Each 
pressurization manifold contains inlets for the three engine ET 
pressurization output lines. The ET GH2 pressurization manifold 
contains, in addition to the three inlets, an outlet for the GFb 
pressurization vent line. 

The single GH2 pressurization vent line connects to the ET 
GH2 pressurization manifold and to an overboard port. This line 
is used exclusively for vacuum inerting the GH2 pressurization 
lines on orbit. Flow through the line is controlled by the 
normally closed GH2 pressurization line vent valve in the line. 
This valve is controlled by the GH2 PRESS LINE VENT switch 
on panel R 4 . 

PROPELLANT MANAGEMENT VALVES 

Two basic types of valve are used: pneumatically actuated 
and electrically actuated. Pneumatic valves are used where large 
loads are encountered, such as in the control of liquid propellant 
flows. Electrical valves are used for lighter loads such as in the 
control of gaseous propellant flows. 

The pneumatically actuated valves are divided into two 
subtypes: those that require pneumatic pressure to open and 
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close the valve (type one) and those that are spring loaded to one 
position and require pneumatic pressure to move to the other 
position (type two). 

Each type one valve actuator is equipped with two electri¬ 
cally actuated solenoid valves. Each of the two solenoid valves 
controls helium pressure to either an “open” port or a “close” 
port on the actuator. Energizing the solenoid valve on the 
“open” port allows helium pressure to open the pneumatic valve. 
Energizing the solenoid on the “close” port allows helium 
pressure to close the pneumatic valve. Removing power from a 
solenoid valve removes helium pressure from the corresponding 
port of the pneumatic actuator and allows the helium pressure 
trapped in that side of the actuator to vent overboard. Removing 
power from both solenoids allows the pneumatic valve to remain 
in the last commanded position. This type of valve is used for the 
LCb and LHt feedline disconnect valve, the three LH 2 and LCb 
prevalves, and the LEb and LCb inboard and outboard fill/drain 
valves. 

Each type two valve is a single electrically actuated solenoid 
valve that controls helium pressure to either an “open” or a 
“close” port on the actuator. Removing power from the solenoid 
valve removes helium pressure from the corresponding port of 
the pneumatic actuator and allows helium pressure trapped in 
that side of the actuator to vent overboard. Spring force takes 
over and drives the valve to the opposite position. If the spring 
force drives the valve to the open position, the valve is referred to 
as a normally open (NO) valve. If the spring force drives the valve 
to a closed position, the valve is referred to as a normally closed 
(NC) valve. This type of valve is used for the LEb RTLS inboard 
dump valves (NC), LEI 2 RTLS outboard dump valves (NC), LEb 
feedline relief shutoff valve (NO), and LO 2 feedline relief shutoff 
valve (NO). 

The electrically actuated solenoid valves are spring-loaded to 
one position and move to the other position when electrical 


power is applied. These valves are referred to as either normally 
open (NO) or normally closed (NC) based on their position in the 
deenergized state. The electrically actuated solenoid valves are 
the GEb pressurization line vent valve (NC), the three GH 2 
pressurization flow control valves (NO), and the three GOo 
pressurization flow control valves (NO). 


ORB ITER HELIUM SUBSYSTEM 

The orbiter helium system consists of seven 0.13-cubic-meter 
(4.7-cubic-foot) helium supply tanks, three 0.48-cubic-meter 
(17.3 cubic-foot) helium supply tanks, and associated regulators, 
check valves, distribution lines, and control valves. Four of the 
0.13-cubic-meter (4.7-cubic-foot) helium supply tanks are locat¬ 
ed in the orbiter aft fuselage, and the other three are located 
below the payload bay liner in the mid fuselage in the area 
originally reserved for the cryogenic storage tanks of the power 
reactant and storage tanks for the power reactant and storage 
distribution system. The three 0.48-cubic-meter (17.3-cubic-foot) 
helium supply tanks are also located below the payload bay liner 
in the mid fuselage. 

The tanks are of a composite construction consisting of a 
titanium liner with a fiber glass structural overwrap. The large 
tanks are 1023 millimeters (40.3 inches) in diameter and have a 
dry weight of 123 kilograms (272 pounds). The smaller tanks are 
660 millimeters (26 inches) in diameter and have a dry weight of 
33 kilograms (73 pounds). The tanks are serviced before liftoff to 
217,350 mm.Hg (4200 psi). 

Each of the larger tanks is plumbed to two of the smaller 
ones, forming three sets of tanks for the engine helium 
pneumatic supply system. Each set-one in the mid fuselage, the 
other in the aft fuselage—supplies helium to one engine and is 
referred to as left, center, or right engine helium. Each set 
normally provides helium to only that engine for in-flight purges 
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and provides pressure to that engine for emergency pneumatic 
shutdown of that engine. 

The remaining small tank is referred to as pneumatic helium 
supply. It supplies helium pressure to actuate all pneumatically 
operated valves in the propellant management subsystem. 

There are eight helium supply tank isolation valves grouped 
in pairs. One pair of valves is connected to each engine helium 
supply tank cluster and one pair is connected to the pneumatic 
supply tank. In the engine helium supply tank system, each pair 
of isolation valves is connected in paralled, with each valve in the 
pair controlling helium flow through one leg of a dual redundant 
helium supply circuit. Each helium supply circuit contains two 
check valves, a filter, an isolation valve, a regulator, and a relief 
valve. The two isolation valves connected to the pneumatic 
supply tanks are also connected in parallel; however the rest of 
the pneumatic supply system consists of a filter, the two 
isolation valves, a regulator, a relief valve, and a single check 
valve. Each of the engine helium supply isolation valves can be 
individually controlled by its own switch on panel R2, whereas 
the two pneumatic helium supply isolation valves are controlled 
by a single switch on panel R2. All of these valves can also be 
controlled automatically by the computers. The helium supply 
tank isolation valves are spring-loaded to the closed position and 
pneumatically actuated to the open position. 

Each engine helium supply system operates independently 
until after MECO. The three engine helium supply systems have a 
helium “out” interconnect valve which connects it to the 
pneumatic supply system. A check valve is in series with the 
“out” interconnect value, which permits helium flow from the 
engine to the pneumatic supply system. The three engine helium 
supply systems also have a helium “in” interconnect valve which 
connects the pneumatic supply system to that engine supply 
system. The check valve, in series with the “in” interconnect 
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valve, permits helium flow from the pneumatic supply to that 
engine system. Each pair of interconnect valves is controlled by a 
single switch on panel R2, which has three positions. 

The three switch positions, on panel R2, are IN OPEN/OUT 
CLOSE, GPC, and IN CLOSE/OUT OPEN. With the switch in the 
IN OPEN/OUT CLOSE position, the “in” interconnect valve is 
open and the “out” interconnect valve is closed. The IN 
CLOSE/OUT OPEN switch position will do the reverse. With the 
switch in GPC, the “out” interconnect valve is opened automa¬ 
tically at the beginning of the LO 2 dump and closed 
automatically at the end of the LH 2 dump. 

In the RTLS abort, the GPC switch position will cause the 
“in” interconnect valve to open automatically at MECO and 
close automatically 20 seconds later. If the corresponding engine 
was shut down prior to MECO, its “in” interconnect valve will 
remain closed at MECO. At any other time, placing the switch in 
GPC position results in both interconnect valves closing and 
remaining closed. 

The additional interconnect crossover valve between the left 
engine helium supply and the pneumatic helium supply is used in 
the event of the pneumatic helium supply regulator failure due to 
only one regulator in the pneumatic helium supply system. The 
crossover helium valve would be opened and the pneumatic 
helium supply tank isolation valves would be closed, allowing the 
left engine helium supply system to supply helium to the 
pneumatic helium supply. The crossover helium valve is control¬ 
led by its own three-position switch on panel R2. The switch 
positions are OPEN, GPC, and CLOSE. The GPC position is 
presently undefined. 

The manifold pressurization valves are located downstream of 
the pneumatic helium pressure regulator and are used to control 
the flow of helium to the propellant manifolds during nominal 
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propellant dump and manifold repressurization. There are four of 
these valves grouped in pairs. One pair controls helium pressure 
to the LO 2 propellant manifolds, and the other pair controls 
helium pressure to the LH 2 propellant manifold. 


The LH 2 RTLS dump pressurization valves are located 
downstream of the pneumatic helium pressure regulator and are 
used to control the pressurization of the LH 2 propellant 
manifolds during an RTLS LH 2 dump. There are two of these 
valves connected in series. Unlike the LH 2 manifold pressuriza¬ 
tion valves, the LH 2 RTLS dump pressurization valves cannot be 
controlled from the flight deck. During an RTLS abort, these 
valves are opened and closed automatically by GPC commands. 
An additional difference between the nominal and the LH 2 
dump is in the routing of the helium and the location at which it 
enters the LH 2 feedline manifold. For the nominal LH 2 dump, 
helium passes through the LH 2 manifold pressurization valves 
and enters the feedline manifold in the vicinity of the LFb 
feedline disconnect valve. For the LH 2 RTLS dump, helium 
passes through the RTLS LH 2 dump pressurization valves and 
enters the feedline manifold in the vicinity of the LH 2 inboard 
fill/drain valve on the inboard side. There is no RTLS LCb dump 
pressurization valve since the LO 2 manifold is not pressurized 
during the RTLS LO 2 dump. 


Each engine helium supply tank cluster has two pressure 
regulators operating in parallel. Each regulator controls pressure 
in one leg of a dual-redundant helium supply circuit and is 
designated either a high regulator or low regulator. The high 
regulator is set to provide a nominal outlet pressure of 41,400 
mmHg (800 psi); the low regulator is set to provide a nominal 
outlet pressure of 37,001 mmHg (715 psi). When the system 
demand is low, only the high regulator will operate. When 
demand increases, the low regulator will begin to operate, 
doubling the flow capacity of the system. 
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The pressure regulator for the pneumatic helium supply 
system is not redundant and is set to provide outlet pressure 
between 37,001 to 34,847 mmHg (715 to 770 psi). Downstream 
of the regulator are two more regulators: the LH 2 manifold 
pressure regulator and the LO 2 manifold pressure regulator. 
These regulators are used only during MPS propellant dump and 
manifold repressurization. Both regulators are set to provide 
outlet pressures between 1035 to 1293 mmHg (20 to 25 psi). 
Flow through the regulators is controlled by the appropriate set 
of two normally closed manifold pressurization valves. 

Downstream of each pressure regulator, with the exception 
of the two manifold repressurization regulators, is a relief valve. 
The valve protects the downstream helium distribution lines from 
overpressurization in the event the associated regulator fails fully 
open. The two relief valves in each engine helium supply are set 
at different values, reflecting the differences in the settings of the 
corresponding low and high regulators. The relief valve in the 
pneumatic helium supply circuit relieves at 41,400 to 43,987 
mmHg (800 to 850 psi) and reseats at 40,623 mmHg (785 psi). 

There is one pneumatic control assembly (PCA) manifold on 
each of the three SSME’s. The PCA is essentially a manifold 
pressurized by one of the engine helium supply systems and 
contains solenoid valves to control and direct pressure to perform 
various essential functions. The valves are energized by discrete 
on/off commands from the output electronics of the associated 
SSME controller. Functions controlled by the PCA include 
in-flight purges of the fuel system high-pressure oxidizer turbo¬ 
pump (HPOT) intermediate seal cavity and prebumer oxidizer 
domes, and pneumatic shutdown. 

SPACE SHUTTLE MAIN ENGINES 

Oxidizer from the external tank enters the orbiter at the LO 2 
feedline disconnect valve, then into the orbiter LO 2 feedline 
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manifold. There it branches out into three parallel paths, one to 
each engine. In each branch an LO 2 prevalve must be opened to 
permit flow to the low-pressure oxidizer turbopump (LPOT). 

The LPOT is an axial flow pump driven by a six-stage turbine 
powered by LO 2 . It boosts the LO 2 pressure from 5175 mmHg 
(100 psi) to 23,649 mmHg (457 psi). The flow from the LPOT is 
supplied to the high-pressure oxidizer turbopump (HPOT). 
During engine operation, the pressure boost permits the HPOT to 
operate at high speeds without cavitation. The LPOT operates at 
approximately 5075 rpm. The LPOT is approximately 457 by 
457 millimeters (18 by 18 inches) and is connected to the vehicle 
propellant ducting and supported in a fixed position by the 
orbiter structure. 


The HPOT consists of two single-stage centrifugal pumps 
(main pump and preburner pump) mounted on a common shaft 
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and driven by a two-stage hot gas turbine. The main pump boosts 
the LO 2 pressure from 23,649 ramHg (457 psi) to 239,757 
mmHg (4,633 psi) while operating at approximately 29,120 rpm. 
The HPOT discharge flow splits into several paths, one of which 
is routed to drive the LPOT turbine. Another path is routed to 
and through the main oxidizer valve and enters into the engine 
main combustion chamber. Another small flow path is tapped off 
and sent to the oxidizer heat exchanger. Before the LO 2 enters 
the oxidizer heat exchanger, it flows through an anti-flood valve 
that prevents LO 2 from entering the heat exchanger until 
sufficient heat is present to convert the LO 2 to gas. The heat 
exchanger utilizes the heat contained in the discharge gases from 
the HPOT turbine to convert the LO 2 to gas. The gas is then sent 
to a manifold, where it joins gas from the other engines and is 
sent to the external tank to pressurize the LO 2 tank. Another 
path enters the HPOT second-stage (prebumer pump) to boost 
the LO 2 pressure from 239,757 mmHg (4,633 psi) to 396,146 
mmHg (7,655 psi) and passes through the oxidizer preburner 
oxidizer valve (OPOV) into the oxidizer prebumer (OPB) and 
through the fuel preburner oxidizer valve (FPOV) and into the 
fuel prebumer (FPB). The HPOT is approximately 609 by 914 
millimeters (24 by 36 inches). The HPOT is flange attached to 
the hot gas manifold. 

Fuel enters the orbiter at the LH 2 feedline disconnect valve, 
then into the orbiter GH 2 feedline manifold, and branches out 
into three parallel paths to each engine. In each LH 2 branch is an 
LH 2 prevalve, which, when open, permits LH 2 flow to the 
low-pressure fuel turbopump (LPFT). 

The LPFT is an axial-flow pump driven by a two-stage 
turbine powered by GH 2 . It boosts LH 2 pressure from 1552 
mmHg (30 psi) to 12,161 mmHg (235 psi) and supplies it to the 
high-pressure fuel turbopump (HPFT). During engine operation, 
the pressure boost provided by the LPFT permits the HPFT to 
operate at high speeds without cavitation. The LPFT operates at 
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approximately 14,760 rpm. The LPFT is approximately 457 by 
609 millimeters (18 by 24 inches). The LPFT is connected to the 
vehicle propellant ducting and is supported in a fixed position by 
the orbiter structure 180 degrees from the LPOT. 


The HPFT is a three-stage centrifugal pump driven by a 
two-stage hot-gas turbine. It boosts LH 2 pressure from 12,161 
mmHg (235 psi) to 319,504 mmHg (6,174 psi). The HPFT 
operates at approximately 30,015 rpm. The discharge flow from 
the turbopump is routed to and through the main valve and then 
splits into three flow paths. One path is through the jacket of the 
main combustion chamber, where the hydrogen is used for 
cooling the chamber walls. It is then routed from the main 
combustion chamber to the LPFT, where it is used to drive the 
LPFT turbine. A small portion of the flow from the LPFT is then 
directed to a common manifold from all three engines to form a 
single path to the external tank to maintain LH 2 tank pressuriza¬ 
tion. The remaining hydrogen passes between the inner and outer 
walls to cool the hot-gas manifold and is discharged into the main 
combustion chamber. The second hydrogen flow path from the 
main fuel valve is through the engine nozzle (for cooling the 
nozzle). It then joins the third flow path from the chamber 
coolant valve. The combined flow is then directed to the fuel and 
oxidizer preburner. The HPFT is approximately 558 by 1117 
millimeters (22 by 44 inches). The HPFT is flange-attached to 
the hot-gas manifold. 


The oxidizer (OPB) and fuel (FPB) prebumers are welded to 
the hot-gas manifold. The fuel and oxidizer enter each preburner, 
where they are mixed so that efficient combustion can occur. 
The augmented spark igniter is a small combustion chamber 
located in the center of the injector of each prebumer. The two 
dual spark igniters, which are activated by the controller, are 
used during the engine-start sequence to initiate combustion in 
each preburner. They are turned off after approximately three 
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seconds as the combustion process is self-sustaining. The prebum- 
ers produce the fuel-rich hot gas which passes through the 
turbines to generate the power to operate the high-pressure 
turbopumps. The oxidizer preburner outflow drives the turbine 
which is connected to the HPOT and oxidizer prebumer pump. 
The fuel preburner outflow drives the turbine which is connected 
to the HPFT. 

The HPOT turbine and HPOT pumps are mounted on a 
common shaft. Mixing of the fuel-rich hot gas in the turbine 
section and the LO 2 in the main pump could create a hazard. To 
prevent this, the two sections are separated by a cavity that is 
continuously purged with the MPS engine helium supply during 
engine operation. Two seals minimize leakage into the cavity. 
One is between the turbine section and the cavity and other is 
between the pump section and cavity. Loss of helium pressure to 
this cavity results in automatic engine shutdown. 

Speed of the HPOT and HPFT turbines depends on the 
position of the corresponding oxidizer and fuel prebumer 
oxidizer valves. These valves are positioned by the engine 
controller, which uses them to throttle the flow of LO 2 to the 
preburners and thus control engine thrust. The oxidizer and fuel 
preburner valves increase or decrease the LO 2 and LH 2 flow, 
thus increasing or decreasing prebumer chamber pressure, HPOT 
and HPFT turbine speed, and LO 2 and GH 2 flow into the main 
combustion chamber, increasing or decreasing the engine thrust, 
thus throttling the engine. The oxidizer and fuel prebumer valves 
operate together to throttle the engine and maintain the engine 
mixture ratio at constant 6:1. 

The main oxidizer valve (MOV) and main fuel valve (MFV) 
control LO 2 and LH 2 flow into the engine and are controlled by 
each engine controller. When an engine is operating, the main 
valves are fully open. 

A coolant control valve (CCV) is mounted on the combustion 
chamber coolant bypass duct of each engine. The engine 


controller regulates the amount of GH 2 allowed to bypass the 
nozzle coolant loop, thus controlling its temperature. The 
chamber coolant valve is 100-percent open before engine start 
and after shutdown. During engine operation, it will be 
100-percent open for throttle settings of 100 to 109 percent for 
minimum cooling. For throttle settings between 65 to 100 
percent, its position will range from 66.4-to 100-percent open 
for maximum cooling. 

Each engine main combustion chamber (MCC) receives 
fuel-rich hot gas from a hot-gas manifold cooling circuit. The 
GH 2 and LO 2 enter the chamber at the injector, which mixes the 
propellants. A small augmented spark igniter (ASI) chamber is 
located in the center of the injector. The dual-redundant igniter 
is used during the engine start sequence to initiate combustion. 
After approximately three seconds, the igniters are turned off, 
and the combustion process is self-sustaining. The main injector 
and dome assembly is welded to the hot-gas manifold. The main 
combustion chamber is bolted to the hot-gas mainifold. 

The inner surface of each combustion chamber, as well as the 
inner surface of each nozzle, is cooled by GH 2 flowing through 
coolant passages. The nozzle assembly is a bell-shaped extension 
bolted to the main combustion chamber. The nozzle is 2870 
millimeters (113 inches) long and has an exit outside diameter of 
2387 millimeters (94 inches). An engine-to-orbiter-heat-shield 
support ring is welded to the forward end of the nozzle and is the 
engine attach point for the orbiter-supplied heat shield. Thermal 
protection for the nozzles is necessary because of the exposure 
portions of the nozzles experience during the launch, ascent, 
on-orbit, and entry phases of a mission. The insulation consists of 
four layers of metallic batting covered with a metallic foil and 
screening. 

The five propellant valves on each engine (oxidizer preburner 
oxidizer, fuel preburner oxidizer, main oxidizer, main fuel, and 
chamber coolant) are hydraulically actuated and controlled by 
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electrical signals from the controller. They can be fully closed by 
using the MPS engine helium supply system as a backup 
actuation system. 

The low-pressure oxygen (LPOT) and fuel (LPFT) turbo¬ 
pump are mounted 180 degrees apart on the orbiter aft fuselage 
thrust structure. The lines from the low-pressure turbopumps to 
the high-pressure turbopumps contain flexible bellows that 
enable the low-pressure turbopumps to remain stationary while 
the rest of the engine is gimbaled for thrust vector control. The 
LH 2 line from the LPFT to the HPFT is insulated to prevent the 
formation of liquid air. 

The main oxidizer and fuel valves also are used after 
shutdown. During a propellant dump, the main oxidizer valve 
will be opened to allow residual LO 2 to be dumped overboard 
through the engine and the LH 2 fill and drain valves overboard. 
After the dump is completed, the valves close and remain closed 
for the remainder of the mission. 

The gimbal bearing is bolted to the main injector and dome 
assembly and is the thrust interface between the engine and 
orbiter. The bearing assembly is approximately 287 by 355 milli¬ 
meters (11.3 by 14 inches). 

Overall an SSME weighs approximately 3,001 kilograms 
(6,618 pounds). 

POGO SUPPRESSION SYSTEM 

A pogo suppression system prevents the transmission of 
low-frequency flow oscillations into the high-pressure turbopump 
and ultimately prevents main combustion chamber pressure 
(engine thrust) oscillation. Flow oscillations transmitted from the 
Space Shuttle vehicle are suppressed by a partially filled gas 
accumulator, which is flange-attached to the high-pressure 
oxidizer turbopump inlet duct. 
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The system consists of a 0.01-cubic-meter (0.6-cubic-foot) 
accumulator with an internal standpipe, helium precharge valve 
package, gaseous oxygen supply valve package, and two recircula¬ 
tion isolation valves (one being located on the orbiter). 

During engine start, the accumulator is charged with helium 
1.5 seconds after the start command to provide pogo protection 
until the engine heat exchanger is operational and gaseous 
oxygen is available. 

The accumulator is partially chilled by LO 2 during the engine 
chilldown operation. The accumulator fills to the overflow 
standpipe line inlet level, which is sufficient to preclude gas 
ingestion at start. 


< 


( / 






















































Space Transportation System 



During engine operation, the accumulator is charged with a 
continuous gaseous oxygen flow maintained at a rate governed 
by the engine operation point. 

The liquid level in the accumulator is controlled by the 
overflow standpipe line in the accumulator, which is orificed to 
regulate the gaseous oxygen overflow over the engine operating 
power level. The system is sized to provide sufficient gaseous 
oxygen replenish at the minimum gaseous oxygen flow rate and 
to permit sufficient gaseous oxygen overflow at the maximum 
decreasing pressure transient in the low-pressure oxidizer turbo¬ 
pump discharge duct. At all other conditions, excess gaseous and 
liquid oxygen are recirculated back to the low-pressure oxidizer 
turbopump inlet through the engine oxidizer bleed duct. 

SSME CONTROLLER 

The controller is an electronics package mounted on each 
SSME and contains two digital computers with associated 
electronics that control all main engine components and opera¬ 
tions. The controller is attached to the main combustion 
chamber by shock-mount fittings. 

Each controller operates in conjunction with engine sensors, 
valves, actuators, and spark ignitors to provide a self-contained 
system for engine control, checkout, and monitoring. The 
controller provides engine flight readiness verification, engine 
start and shutdown sequencing, closed-loop thrust and propellant 
mixture ratio control, sensor excitation, valve actuator and spark 
ignitor control signals, engine performance limit monitoring, 
onboard engine checkout and response to vehicle commands and 
transmission of engine status, and performance and maintenance 
data. 

Each engine controller receives engine commands transmitted 
by the orbiter GPC’s through an engine interface unit (EIU) 
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• Computer Control of Engine 

• Input Power 

115-volt, 400-Hz, 3-phase ac 
28-volt dc 

490 watts (Standby) 

600 watts (Mainstage) 


• Size: 596 x 368 x 431 millimeters 

(23.5 x 14.5 x 17 inches) 

• Heat Transfer 

Forced Air-Cooling (Ground Checkout) 
Convection Cooling (Engine Operation) 


SSME Controller 


dedicated to that engine controller. The engine controller 
provides its own commands to the main engine components. 
Engine data are sent to the engine controller, where the data are 
stored in a vehicle data table (VDT) in the controller’s computer 
memory. Controller status compiled by the engine controller’s 
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computer are also added to the vehicle data table. The vehicle 
data table is periodically output by the controller to the EIU for 
transmission to the orbiter GPC’s. 

The EIU is a specialized multiplexer/demultiplexer (MDM) 
that interfaces with the orbiter GPC’s and with the engine 
controller. When engine commands are received by the EIU, the 
data are held in a buffer until the EIU receives an orbiter GPC 
request for data. The EIU then sends data to each orbiter GPC. 
Each EIU is dedicated to one SSME and communicates only with 
the engine controller that controls that SSME. The EIU’s have no 
interface with each other. 

The controller provides responsive control of engine thrust 
and mixture ratio throughout the digital computer in the 
controller, updating the instructions to the engine control 
elements 50 times per second (every 20 milliseconds). Engine 
reliability is enhanced by a dual redundant system that allows 
normal operation after the first failure and a fail-safe shutdown 
after a second failure. EJigh-reliability electronic parts are used 
throughout the controller. 

The digital computer is programmable, allowing modification 
of engine control equations and constants by change to the 
stored program (software). The controller is packaged in a sealed, 
pressurized chassis and is cooled by convection heat transfer 
through pin fins as part of the main chassis. The electronics are 
distributed on functional modules with special thermal and 
vibration protection. 

The controller is divided into five subsystems: input elec¬ 
tronics, output electronics, computer interface electronics, digital 
computer, and power supply electronics. Each subsystems is 
duplicated to provide dual-redundant capability. 

The input electronics receive data from all engine sensors, 
condition the signals, and convert to digital values for processing 
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by the digital computer. Engine control sensors are dual-redun¬ 
dant, and maintenance data sensors are non-redundant. 


The output electronics convert the computer digital control 
commands into voltages suitable for powering the engine spark 
igniters, the off/on valves, and the engine propellant valve 
actuators. 

The computer interface electronics control the flow of data 
within the controller, input data to the computer, and computer 
output commands to the output electronics. They also provide 
the controller interface with the vehicle engine electronics 
interface unit for receiving engine commands which are triple- 
redundant channels from the vehicle and transmission of engine 
status and data through dual-redundant channels to the vehicle. 
The computer interface electronics includes the watchdog timers 
that determine which channel of the dual redundant 
mechanization is in control. 

The digital computer is an internally stored, general-purpose, 
digital computer that provides the computational capability 
necessary for all engine control functions. The memory has a 
program storage capacity of 16,384 data and instruction words 
(17-bit words; 16 bits for program use, one bit for parity). 

The power supply electronics convert the 115-V, 3-phase, 
400-Hz vehicle power to the individual power supply voltage 
levels required by the engine control system and monitor the 
level of power supply channel operation within satisfactory 
limits. 

Each orbiter GPC, operating in a redundant set, will issue 
engine commands to the engine interface units for transmission 
to its corresponding engine controllers. Each orbiter GPC has an 
SSME system operating program (SOP) application software 
residing in it. The engine commands are output over its assigned 
flight control (FC) data bus (a total of four GPC’s outputting 
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over four FC data buses). Therefore, each EIU will receive four 
commands. The nominal ascent configuration has orbiter GPC’s 
1, 2. 3, and 4 outputting on the FC data buses 5, 6, 7, and 8 
respectively. Each FC data bus is connected to one multiplexer 
interface adapter (MIA) in each EIU. 


The EIU checks the received engine commands for transmis¬ 
sion errors. If there are none. The EIU passes the validated engine 
commands on to the controller interface assemblies, which 
output the validated engine commands to the engine controller. 
An engine command that does not pass validation is not sent to 
the controller interface unit (CIA). Instead it is dead-ended in the 
engine interface unit's multiplexer interface unit (MIU). Com¬ 
mands that come through MIA’s one and two are sent to CIA’s 
one and two. respectively. Commands that come to MIA’s three 
and four pass through a CIA three data select logic. This logic 
outputs the command that arrives at the logic first, from either 
MIA three or four. The other command is dead-ended in CIA 
three select logic. The selected command is output through CIA 
three. In this manner, the EIU reduces the four commands sent 
to the EIU to three commands output by the EIU. 


The engine controller vehicle interface electronics (VIE) 
receive the three engine commands output by its EIU, check for 
transmission errors (hardware validation), and send controller 
hardware-validated engine commands to the Controller A and B 
electronics. Normally, Channel A electronics is in control, with 
Channel B electronics active, but not in control. If Channel A 
fails. Channel B will assume control. If Channel B subsequently 
fails, the engine controller will shut down the engine pneumati¬ 
cally. If two or three commands pass voting, the engine 
controller will issue its own commands to accomplish the 
function commanded by the orbiter GPC’s. If command voting 
fails, two or all three commands fail, the engine controller will 
maintain the last command that passed voting. 
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The backup flight system (BFS) orbiter GPC 5 contains an 
SSME hardware applications software interface program (HIP). 
When the four orbiter GPC’s (1, 2, 3, and 4) are in control, the 
BFS GPC 5 does no commanding. When the BFS GPC 5 is in 
control, the BFS sends commands to, and requests data from, the 
EIU’s, and in this configuration, the four orbiter GPC’s (1,2, 3, 
and 4) neither command nor listen. The BFS, when engaged' 
allows GPC 5 to command FC buses 5, 6, 7, and 8 for main 
engine control through the SSME HIP. The SSME HIP performs 
the same main engine command functions as the SSME SOP. The 
command flow through the EIU’s and engine controllers remains 
the same for BFS engaged as for the four-GPC redundant set. 

The engine controller provides all the SSME data to the 
orbiter GPC’s. Sensors in the engine supply pressures, tempera¬ 
tures, flow rates, turbopump speeds, valve position, and engine 
servovalve actuator positions to the engine controller. The engine 
controller assembles these data into a vehicle data table and adds 
status data of its own to the vehicle data table. The vehicle data 
tables output Channels A and B go to the vehicle interface 
electronics for transmission to the EIU’s. The vehicle interface 
electronics output over both data paths. The data paths are called 
primary and secondary. Channel A vehicle data table is normally 
sent over both primary and secondary control (Channel A has 
failed), then the vehicle electronics interface outputs Channel B 
vehicle data table over both primary and secondary data paths. 

The vehicle data table is sent by the controller to the EIU. 
There are only two data paths versus three command paths 
between the engine controller and the EIU. The data path that 
interfaces with controller interface adapter (CIA) one is called 
primary data. The path that interfaces with CIA two is called 
secondary data. Primary and secondary data are held in buffers 
until the orbiter GPC’s send a data request command to the 
EIU’s. The GPC’s request both primary and secondary data. 
Primary data will be output only through multiplexer interface 
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adapter one on each EIU. Secondary data will be output only 
through multiplexer interface adapter four on each EIU. 

During prelaunch, the orbiter GPC’s will look at both 
primary and secondary data. Loss of either primary or secondary 
data will result in data path failure and either engine ignition 
inhibit or launch pad shutdown of all three SSME’s. 

At T-0, the orbiter GPC’s will request both primary and 
secondary data from each EIU. For no failures, only primary 
data are looked at. If there is a loss of primary data (which can 
occur between the engine controller Channel A electronics and 
the SSME SOP), then the secondary data are looked at. 

There are two primary written engine controller computer 
software programs: the flight operational program and the test 
operational program. The flight operational program is an 
on-line, real-time, process-control program that processes inputs 
from engine sensors; controls the operation of the engine 
servo-valves, actuators, solenoids, and spark igniters; accepts and 
processes vehicle commands; provides and transmits data to the 
vehicle; and provides checkout and monitoring capabilities. The 
test operational program supports engine testing and, functional¬ 
ly, is similar to the flight operational program, but differs with 
respect to implementation. The computer software programs are 
modular and are defined as computer program components, 
which consist of a data base organized into tables and 15 
computer program components. During application of the 
computer program components, the program performs data 
processing functions for failure detection and status to the 
vehicle. As system operation progresses through an operating 
phase, different combinations of control functions are operative 
at different times. These combinations within a phase are defined 
as operating modes. 

The checkout phase, operational programs, is initiated to 
begin active control monitoring or checkout. The standby mode 
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in this phase is a waiting mode of controller operation during 
which active control sequence operations are in process. Monitor¬ 
ing functions that do not affect engine hardware status are 
continually active during the mode. Such functions include 
processing of vehicle commands, status update, and controller 
self-test. During checkout, data and instructions can be loaded 
into the engine controller computer memory. This permits 
updating of software program and data as necessary to proceed 
with engine firing operations or checkout operations. Also in this 
phase, a component checkout mode, consisting of checkout or 
engine leak test, is performed on an individual engine system 
component. 

The start preparation phase consists of system purges and 
propellant conditioning, which are performed in preparation for 
engine start. Purge sequence number one mode is the first pui^e 
sequence, including oxidizer system and intermediate seal purge 
operation. Purge sequence number two mode is the second purge 
sequence, including fuel system purge operation, and continua¬ 
tion of purges initiated in purge sequence number one. Purge 
sequence number three mode includes propellant recirculation 
(bleed valve operation).The fourth purge sequence mode includes 
fuel system purge after propellant drop. The engine ready mode 
is when proper engine thermal conditions for start have been 
attained and other criteria for start have been satisfied, including 
a continuation of purge sequence mode four. 

The start phase covers operations for starting or engine firing, 
beginning with scheduled open-loop operation of propellant 
valves. The start initiation mode includes all functions prior to 
ignition confirmed and closing of the thrust control loop. The 
thrust buildup mode detects ignition by monitoring main 
combustion chamber pressure and that closed-loop thrust build¬ 
up sequencing is in progress. 

The mainstage phase is automatically entered upon successful 
completion of the start phase. The normal control mode has 
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initiated mixture ratio control and thrust control is operating 
normally. In case of a malfunction, the electrical lock mode will 
be activated. In that mode engine propellant valves are electrical¬ 
ly held in a fixed configuration, and all control loop communica¬ 
tions are suspended. There is also the hydraulic lockup mode, in 
which all fail-safe valves are deactivated to hydraulically hold the 
propellant valves in a fixed configuration, and all control loop 
functions are suspended. 

The shutdown phase covers operations to reduce main 
combustion chamber pressure and drive all valves closed to effect 
full engine shutdown. Throttling to minimum power level (MPL) 
mode is that portion of the shutdown in progress at a 
programmed shutdown thrust reference level above MPL. Valve 
schedule throttling mode is that stage in the shutdown sequence 
where the programmed thrust reference has decreased below 
MPL. Propellant valves closed is that stage in the shutdown 
sequence following closure of all liquid propellant valves, and the 
shutdown purge is activated and verification sequences are in 
progress. The fail-safe pneumatic mode is when the fail-safe 
pneumatic shutdown is used. 

The post-shutdown phase represents the state of the SSME 
and engine controller at completion of engine firing. The standby 
mode is a waiting mode of controller operations, with functions 
identical to those of standby during checkout and is the normal 
mode of post-shutdown entered after completion of the 
shutdown phase. The terminate sequence mode terminates a 
purge sequence by a command from the vehicle. All propellant 
valves are closed, and all solenoid and torque motor valves are 
deenergized. 

Each controller utilizes AC power provided by the MPS 
ENGINE POWER LEFT, CTR, RIGHT switches on panel R2. 
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Each controller has electrical heaters that are powered by 
main bus power through a remote power controller (RPC). The 
RPC is controlled by the MAIN PROPULSION SYSTEM 
ENGINE CNTRL HTR LEFT, CTR, RIGHT switches on panel 
R4. The heaters are not normally used until after MECO and 
provide survival heat for the remainder of the mission. 

Each controller is 596 by 368 by 431 millimeters (23.5 by 
14.5 by 17 inches) and weighs 95 kilograms (211 pounds). 
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MALFUNCTION DETECTION 

There are three separate means of detecting malfunctions 
within the main propulsion system: engine controller, caution 
and warning system, and GPC. 

The engine controller, through its network of sensors, has 
access to numerous engine operating parameter. A group of these 
parameters has been designated as critical operating parameters, 
and, for these parameters, special limits have been defined and 
arc hard-wired and are limit-sensed within the caution and 
warning system. If a violation of any limit is detected, the 
caution and warning system will illuminate the red MPS (main 
propulsion system) caution and warning on panel F7. The MPS 
red caution and warning light will illuminate due to an MPS 
engine LO 2 manifold pressure above 12,885 mmHg (249 psia), 
MPS engine LH 2 manifold pressure below 1,449 or above 
3,105 mmHg (below 28 or above 60 psia), MPS helium pressure 
center, left, or right below 5,951 mmHg (1,150 psia), MPS 
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helium regulated pressure center, left, or right above 
42,435 mmHg (820 psia), MPS helium dp/dt, left, center, or right 
above 1,500 mmHg (29 psia). It is noted that the flight crew can 
monitor on panel F7 the MPS PRESS HELIUM PNEU, L, C, R 
TANK or REG in conjunction with the TANK or REG position 
of the switch on panel F7. In addition, the MPS PRESS ENG 
MANF LO 2 , LH 2 can also be monitored on panel F7. A number 
of the conditions will require crew action: the MPS engine LH 2 
manifold pressure below the minimum setting will require the 
flight crew to pressurize the external LH 2 tanks using LH 2 
ULLAGE PRESS switch on panel R2 to OPEN, and a low helium 
pressure may require the flight crew to interconnect the 
pneumatics helium tank and the engine helium tanks using the 
MPS He INTERCONNECT valve switches on panel R2 for 
whichever engine helium system is affected. 

The engine controller also has a self-test feature allowing it 
to detect certain malfunctions involving its own sensors and 
control devices. For each of the three engines, there is an amber 
(lower half) MAIN ENGINE STATUS LEFT, CRT, RIGHT light 
on panel F7. A light will illuminate when the corresponding 
engine helium pressure is below 59,512 mmHg (1,150 psia) or 
regulated helium pressure is above 42,435 mmHg (820 psia). 

The amber (lower half) of the MAIN ENGINE STATUS 
LEFT, CTR, RIGHT light on panel F7 may also be illuminated 
by the SSME SOP (GPC detected malfunctions). The amber light 
may be illuminated due to an electronic hold, hydraulic lockup, 
loss of two or more command channels or command reject 
between the GPC to the SSME controller, or loss of both data 
channels between the SSME controller to the GPC of the 
corresponding engine. In an electronic hold for the affected 
SSME, the tuel flow rate and Pc (chamber pressure) each have 
four sensors grouped in two pairs, and the loss of data from both 
pairs ot its four sensors (to fail both sensors, it is only necessary 
to fail one sensor in each pair) will result in the propellant valve 
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actuators being maintained electronically in the positions existing 
at the time of the second sensor failure. In the case of either the 
hydraulic lockup or an electronic hold, all engine throttling 
capability for the affected engine is lost, thus subsequent 
throttling commands to that engine will not change the thrust 
level. 

The red (upper half) of the MAIN ENGINE STATUS LEFT, 
CTR, RIGHT light on panel F7 will illuminate if the corre¬ 
sponding engine high pressure oxidizer turbine discharge tempera¬ 
ture is above 1,900°R, main combustion chamber pressure is 
below 51,750 mmHg (1,000 psia), high-pressure oxidizer 
turbopump intermediate seal purge pressure is below 8,797 or 
above 33,637 mmHg (below 170 or above 650 psia), high- 
pressure oxidizer turbopump secondary seal purge pressure is 
below 258 or above 4,398 mmHg (below 5 or above 85 psia), or 
flight acceleration safety cutoff system is at 10 g. Because of the 
rapidity with which it is possible to exceed these limits, the 
engine controller has been programmed to sense the limits and 
automatically cut off the engine if the limits are exceeded. 
Although a shutdown as a result of the operating limit violation 
is normally automatic, the flight crew can, if necessary, inhibit an 
automatic shutdown through the use of the MAIN ENGINE 
LIMIT SHUT DN switch on panel C3. The LIMIT SHUT DN 
switch has three positions: ENABLE, AUTO, and INHIBIT. The 
ENABLE position allows only the first engine that violates 
operating limits to be shut down automatically, and if either of 
the two remaining engines subsequently violates operating limits, 
it will be inhibited from automatic shutdown. The INHIBIT 
position inhibits all automatic shutdowns. The MAIN ENGINE 
SHUTDOWN LEFT, CTR, RIGHT pushbuttons on panel C3 have 
spring loaded covers (guards). When trie guard is raised and the 
pushbutton is depressed, the corresponding engine shuts down 
immediately. 

The backup caution and warning processing of the orbiter 
GPC’s can detect certain specified out-of-limit or fault conditions 
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of the MPS. The BACKUP C/W ALARM on panel F7 illuminates, 
a fault message appears on all CRT displays, and an audio alarm 
sounds if the MPS engine LO 2 manifold pressure is at 0 mmHg 
or above 1,500 mmHg (0 or above 29 psia), MPS engine LH 2 
manifold pressure is below 1,552 or above 2,380 mmHg (below 
30 or above 46 psia), MPS helium pressure L, C, or R are below 
5,951 mmHg (1,150 psia), or MPS regulated helium pressure L, 
C, or R are above 42,435 mmHg (820 psia). This is identical to 
the parameter limit sensed by the caution and warning system; 
thus the MPS red light on panel F7 will also be illuminated. 

The SM ALERT indicator on panel F7 will illuminate, a fault 
message will appear on all CRT displays, and an audio alarm will 
be sounded when MPS malfunctions/conditions are detected by 
the orbiter GPC’s SSME SOP or special systems monitoring 
processing. The first four conditions are detected by the SSME 
SOP and are identical to those which illuminated the amber 
(lower half) light of the respective MAIN ENGINE STATUS light 
on panel F7 due to electronic hold, hydraulic lockup, loss of two 
or more command channels or command reject between the GPC 
to the SSME controller, or loss of both data channels between 
the SSME controller to the orbiter GPC. The last four conditions 
are special systems monitoring processing and illuminate the SM 
ALERT light on panel F7, sound an audio alarm, and provide a 
fault message on all CRT’s due to ET LH 2 ullage pressure below 
1,552 or above 2,380 mmHg (below 30 or above 46 psia) or ET 
LO 2 ullage pressure at 0 mmHg or above 1,500 mmHg (0 or 
above 29 psia). (It is noted that the MAIN ENGINE STATUS 
LIGHTS on panel F7 will not illuminate.) 


ORBITER HYDRAULIC SYSTEMS 


The three orbiter hydraulic systems provide hydraulic pres¬ 
sure to the main propulsion system for thrust vector control 
(TVC) and to actuate engine valves on each SSME. 
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The three hydraulic supply systems are distributed to the 
main propulsion system thrust vector control (MPS/TVC) valves. 
These valves are controlled by HYDRAULICS MPS/TVC 1,2,3 
switches on panel R4. A valve is opened by its respective switch 
being positioned to OPEN on panel R4. The talkback indicator 
located above each switch indicates OP or CL for open and close. 

When the three MPS/TVC hydraulic isolation valves are 
opened, hydraulic pressure actuates the engine main fuel valve, 
main oxidizer valve, fuel preburner oxidizer valve, oxidizer 
preburner oxidizer valve, and chamber coolant valve. All hy¬ 
draulic actuated engine valves on an engine receive hydraulic 
pressure from the same hydraulic system. The left engine valves 
are actuated from hydraulic system 2, the center engine valves 
are actuated from hydraulic system 1, and the right engine valves 
are actuated from hydraulic system 3. Each engine valve actuator 
is controlled by dual redundant signals; Channel A/engine servo 
valve 1 and Channel B/engine servo valve 2 from that engine 
controller electronics. As a backup, all hydraulic actuated engine 
valves on an engine are supplied with helium pressure from the 
helium subsystem engine helium tank supply system, left, center, 
and right. In the event of hydraulic lockup, helium pressure is 
used to actuate that engine’s propellant valves to their fully 
closed position upon engine shutdown. 

Hydraulic lockup is a condition in which all of the propellant 
valves on an engine are hydraulically locked in a fixed position. 
This is a built-in protective response of the MPS propellant valve 
actuator/control circuit. It goes into effect any time that low 
hydraulic pressure or loss of control of one or more propellant 
valve actuators renders closed-loop control of engine thrust or 
mixture ratio impossible. Hydraulic lockup allows an engine to 
continue to thrust in a safe manner under conditions that 
normally would require that the engine be shut down; however, 
the affected engine will continue to operate at the throttle level 
in effect at the time hydraulic lockup occurred. Once an engine is 
in a hydraulic lockup condition, any subsequent shutoff 
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commands, whether nominal or premature, will cause a pneu¬ 
matic helium shutdown. Hydraulic lockup does not affect the 
capability of the engine controller to monitor critical operating 
parameters or issue an automatic shutdown if an operating limit 
is out of tolerance; however, the engine shutdown would be 
accomplished pneumatically. 


The three MPS/TVC valves must also be opened to supply 
hydraulic pressure to the six SSME TVC actuators. There are two 
servoactuators per SSME: one for yaw and one for pitch. Each 
actuator is fastened to the orbiter thrust structure and to the 
powerhead of one of the three SSME’s. The two actuators per 
each SSME provides attitude control and trajectory shaping by 
gimbaling of the SSME’s in conjunction with the SRB’s in 
first-stage ascent and without the SRB’s in second-stage ascent. 
Each SSME servoactuator receives hydraulic pressure from two 
of the three orbiter hydraulic systems; one system as a primary 
system and the other as a standby system. Each servoactuator has 
its own hydraulic switching valve. The switching valve receives 
hydraulic pressure from two of the three orbiter hydraulic 
systems and provides a single source pressure to the actuator. 
Normally, the primary hydraulic supply is directed to the 
actuator; however, if the primary system were to fail and lose 
hydraulic pressure, the switching valve would automatically 
switch over to the standby system, and the actuator would 
continue to function on the standby system. The left engine 
pitch actuator utilizes hydraulic system 2 as the primary and 
hydraulic system 1 as the standby. The yaw actuator utilizes 
hydraulic system 1 as the primary and hydraulic system 2 as the 
standby. The center engine pitch actuator utilizes hydraulic 
system 1 as the primary and hydraulic system 3 as the standby. 
And the yaw actuator utilizes hydraulic system 3 as the primary 
and hydraulic system 1 as the standby. The right engine pitch 
actuator utilizes hydraulic system 3 as the primary and hydraulic 
system 2 as the standby, and the yaw actuator utilizes hydraulic 
system 2 as the primary and hydraulic system 3 as the standby. 
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The hydraulic systems are distributed among the actuators 
and engine valves to equalize the hydraulic work load among the 
three systems. 


During on-orbit operations, the HYDRAULIC MPS/TVC 
ISOL VLV SYS1, SYS2, SYS3 switches on panel R4 are 
positioned to CLOSE to protect against hydraulic leaks down¬ 
stream of these valves. In addition, there is no requirement to 
gimbal the SSME’s from the stow position. During on-orbit 
operations when the MPS/TVC valves are closed, the hydraulic 
pressure and return lines within each MPS/TVC are inter¬ 
connected to enable hydraulic fluid circulation for thermal 
conditioning. 

THRUST VECTOR CONTROL 


The Space Shuttle ascent thrust vector control (ATVC) 
portion of the flight control system directs the thrust of the 
three main engines and two SRB nozzles to control attitude and 
trajectory during liftoff and first stage ascent and without the 
SRB’s in second stage ascent. 

The ATVC is an avionics hardware package that provides 
gimbal commands and fault detection for each hydraulic gimbal 
actuator. The MPS ATVC’s are located in the three aft avionics 
bays in the orbiter aft fuselage and are cooled by coldplates and 
the Freon-21 system. The associated flight aft (FA) multiplexer/ 
demultiplexers (MDM s) are also located in the aft avionics bays. 

The MPS TVC command flow starts in the GPC’s, where the 
flight control system generates the TVC position commands, and 
is terminated at the SSME servoactuators, where the actuators 
gimbal the SSME’s in response to the commands. All the MPS 
TVC position commands generated by the flight control system 
are issued to MPS TVC CMD (command) SOP (system operating 
command), where they are processed and disbursed to their 
corresponding flight aft MDM’s. The flight aft MDM’s separate 
these linear discrete commands and disburse them to the ATVC 
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channel, which generates equivalent command analog voltages for 
each command issued. These voltages are, in turn, sent to the 
servoactuators commanding the SSME hydraulic actuator to 
extend or retract, thus gimbaling the main engine to which it is 
fastened. 

There are six MPS TVC actuators that respond to command 
voltages issued from four ATVC channels. Each ATVC channel 
has six MPS drivers and four SRB drivers. Each actuator receives 
tour identical command voltages from four different MPS drivers 
each located in different ATVC channels. 

Each main engine servoactuator consists of four independent, 
two-stage servovalves, which receive signals from the drivers! 
Each servovalve controls one power spool in each actuator, which 
positions an actuator ram and the engine to control thrust 
direction. 

The four servovalves in each actuator provide a force-summed 
majority voting arrangement to position the power spool. With 
four identical commands to the four servovalves, the actuator 
force sum action prevents a single erroneous command from 
affecting power ram motion. If the erroneous command persists 
for more than a predetermined time, differential pressure-sensing 
activates an isolation driver, which energizes an isolation valve, 
which isolates and removes the defective servovalve hydraulic 
pressure, permitting the remaining channels and servovalves to 
control the actuator ram spool providing that the FCS 
CHANNEL 1,2, 3, 4 switches on panel C3 are in the AUTO 
position. A second failure would isolate and remove the defective 
servovalve hydraulic pressure in the same manner as the first 
failure, leaving only two remaining channels. 

Failure monitors are provided for each channel on the CRT 
and backup caution and warning light to indicate which channel 
has been bypassed for the MPS and/or SRB. If the FCS 
CHANNEL 1,2,3, or 4 switch on panel C3 is positioned to the 
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The TVC avionics are located in avionics bays Bay 6 
4, 5, and 6. Bays are located in the aft end 
of orbiter. 


Location of Orbiter Avionics Bays 

OFF position, that ATVC channel is isolated from that servo¬ 
valve on all MPS and SRB actuators. The OVERRIDE position of 
FCS CHANNEL 1,2,3,4 switch on panel C3 inhibits the 
isolation valve driver from energizing the isolation valve for its 
respective channel and provides the capability of resetting a 
failed or bypassed channel. 

The ATVC 1, 2, 3, 4 power switches are located on 
panel 017. The ON position enables the respective ATVC 
channel, and the OFF position disables that respective channel. 

Each actuator ram is equipped with transducers for position 
feedback to the TVC system. 

The SSME servoactuators change each SSME’s thrust.vector 
direction as needed during the flight sequence. The three pitch 
actuators gimbal the engine up or down a maximum of 
10 degrees 30 minutes from the installed null position. The three 
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ATVC -Ascent Thrust Vector Control MPS 

FCS -Flight Control System RHC 

GPC's - General Purpose Computers SOP 

MDM -Multiplexer/Demultiplexer TVC 


-Main Propulsion System 
-Rotation Hand Control 
-System Operating Program 
-Thrust Vector Control 

SSMF Thrust Vector Control Interface Flow; 


Channels 


yaw actuators gimbal the engine left or right a maximum of 
8 degreees 30 minutes from the installed position. The installed 
null position for the left and right main engines is 10 degrees up 
from the X-axis in a negative Z direction and 3 degrees 
30 minutes outboard from an engine center line parallel to the 
X-axis. The center engine's installed null position is 16 degrees 
above the X-axis for pitch and on the X-axis for yaw. When any 
engine is installed in the null position, the other engines cannot 
have an engine-to-engine collision with that engine. 


The gimbal rate is 10 degrees per second minimum, 
20 degrees per second maximum. 

There are three actuator sizes for the main engines. For the 
one upper pitch actuator, piston area is 160 centimeters squared 
(24.8 square inches), stroke is 274 millimeters (10.8 inches), 
peak flow is 189 liters per minute (50 gallons per minute), and 
weight is 120 kilograms (265 pounds). Piston area of the two 
lower pitch actuators is 129 centimeters squared (20 square 
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Actuator Orientation - Main Engines 

inches), stroke is 274 millimeters (10.8 inches), peak flow is 170 
liters per minute (45 gallons per minute), and weight is 111 
kilograms (245 pounds). For all three yaw actuators, piston area 
is 129 centimeters squared (20 square inches), stroke is 223 
millimeters (8.8 inches), peak flow is 170 liters per minute (45 
gallons per minute), and weight is 108 kilograms (240 pounds). 

HELIUM, OXIDIZER, AND FUEL FLOW SEQUENCE 

At T minus 04:20:00, the fast-full portion of the LO 2 
loading sequence will begin and is followed at T minus 02:50:00 
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by initiation of the fast-fill portion of the LH2 loading sequence 
under control of the launch processing system (LPS). 

By T minus 02:30:00, the LH 2 and LO 2 tanks are 
essentially filled, and the corresponding GSE will be operating in 
a propellant topping mode. Also at T minus 02:05:00, the LH 2 
chilldown sequence is initiated by the LPS. It opens the LH 2 
recirculation valves and starts the LH 2 recirculation pumps. At T 
minus 02:03:54, as part of the LH 2 chilldown sequence, the LH 2 
prevalves are closed and remain closed until T minus 00:00:09.3. 

During prelaunch, the pneumatic helium supply provides 
pressure to operate the LO 2 and LH 2 prevalves, the LO 2 and 
LH 2 inboard fill/drain valves, and the LO 2 and LH 2 outboard 
fill/drain valves. The three engine helium supply systems are not 
used at this time. 

When the flight crew enters the orbiter, all ten helium 
supply tanks are partially pressurized to approximately 103,500 
mmHg (2000 psi). The filling of the helium tanks to their full 
pressure begins at T minus 02:10:00. Regulated helium pressure 
is between 37,000 to 40,603 mmHg (175 to 785 psi). Helium 
supply tank and regulated pressures are monitored on the MPS 
PRESS, PNEU, L, C, R meters on panel F7. The MPS PRESS 
TANK, REG switch position on panel F7 selects either supply or 
regulated pressures to be displayed on the meters. Engine helium 
and regulated pressures are also available on the CRT display. 

When the flight crew enters the orbiter, the eight MPS He 
ISOLATION A and B switches on panel R2 are in the GPC 
position, the MPS PNEUMATICS L ENG TO XOVR and He 
ISOL switches on panel R2 are in the GPC position, and the MPS 
He INTERCONNECT LEFT, CTR, RIGHT switches on panel R2 
are in the GPC position. With the switches in these positions, the 
eight helium isolation valves are in the open position, and the left 
engine crossover and the six helium interconnect valves are in the 
closed position. 
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SSME Gimbal Pitch Axis 
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SSME Gimbal Yaw Axis 
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Piston Rod End—* 
(Mam Engine) 


— Tail Stock 

(Thrust Structure) 


— Cylinder 
and Piston 
Assembly 


Main Engine Electrohydraulic Servoactuator 

At T minus 00:16:00, one of the first actions by the flight 
crew is to place the six MPS He ISOLATION A and B switches 
and MPS PNEUMATICS He ISOL switch on panel R2 to the 
OPEN position. This will not change the position of the helium 
isolation valves; however, it inhibits the LPS control of valve 
position. 

At T minus 01:00:00, the helium supply tanks are 
pressurized to their final liftoff value of 232,875 mmHg (4,500 
psi). This process is a gradual one to prevent excessive heat 
buildup in the supply tanks. 

During prelaunch, liquid oxygen from the GSE is loaded 
through the GSE/LO? umbilical and passes through the LO 9 
outboard fill/drain valve, the LO 2 inboard fill/drain valve, and the 
LO 2 feedline manifold. The LO 2 then exits the orbiter at the LO 9 
feedline disconnect valve and passes through the ET LO 9 umbib 
ical into the LO 2 tank. During loading, the LO 2 tank vent and 
relief valves are open to prevent pressure buildup in the tank due 
to L0 2 loading, the MAIN PROPULSION SYSTEM PROPEL- 
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LANT FILL/DRAIN LO 2 OUTBD and INBD switches on panel 
R4 are in the GND (ground) position, which allows the LPS to 
control the positions of these valves as required. When LO 9 
loading is completed, the LPS will first command the LCb 
inboard fill/drain valve closed. The LCb in the line between the 
inboard and outboard fill/drain valves Is then allowed to drain 
back into the GSE, and the LPS commands the outboard 
fill/drain valve closed. Maximum fill time is 75 minutes for each 
fluid. 

Also during prelaunch, liquid hydrogen supplied from the 
GSE LH 2 umbilical passes through the LH 2 outboard fill/drain 
valve, the LH 2 inboard fill/drain valve, and the LH 2 feedline 
manifold. The LH 2 then exits the orbiter at the LH 2 feedline 
disconnect valve and passes through the ET LH 2 umbilical into 
the LH 2 tanks. During loading, the LH 2 tank vent valve is left 
open to prevent pressure buildup in the tank due to LH 2 boiloff. 
During LH 2 loading, the MAIN PROPULSION SYSTEM 
PROPELLANT FILL/DRAIN LH 2 INBD and OUTBD switches 
on panel R4 are in the GND position, which allows the LPS to 
control the position of these valves as required. 

At T minus 00:04:00 minutes seconds, the fuel system purge 
begins, followed at T minus 00:03:25 with the beginning of the 
engine gimbal tests. During the MPS engine gimbal test, each 
gimbal actuator is operated through a canned profile of exten¬ 
sions and retractions. If all actuators function satisfactorily, the 
engines are gimbaled to predefined positions at T minus 
00:02:15. The engines will remain in these positions until engine 
ignition. In the predefined start positions, the engines are 
gimbaled in an outward direction (away from one another) so 
that the engine start transient will not cause the engine bells to 
contact one another during the start sequence. 


At T minus 00:02:55 minutes-seconds, the LPS closes the 
LO 2 tank vent valve and the tank is pressurized to 1086 mmHg 
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(21 psi) with GSE-supplied helium. The LOt tank pressure can be 
monitored on the \1PS PRESS ENG MANF LOt meter on panel 
F7 as well as on the CRT. An LCG tank pressure of 1086 mmHg 
(21 psi) corresponds to an LCh engine manifold pressure of 5433 
mmHg (105 psia). 

At T minus 00:01:57, the LPS closes the LHt tank vent 
valve, and the tank is pressurized to 2277 mmHg (44 psia) with 
GSE-supplied helium. LHt tank pressure is monitored on the 
MPS PRESS ENG MANF LH 2 meter on panel F7 as well as on 
the CRT display. An LHt tank pressure of 2277 mmHg (44 psia) 
corresponds to an LHt engine manifold pressure of 2326 mmHg 
(44.96 psia). 

At T minus 00:00:31. the onboard redundant set launch 
sequence is enabled by the LPS. From this point on. all 
sequencing is performed by the orbiter GPC's in the redundant 
set. based on the onboard clock time. The GPC's however, still 
respond to hold, resume count, and recycle commands from the 
LPS. 

At T minus 00:00:16. the GPC's will begin to issue arming 
commands for the SRB ignition pyro initiator controllers*s 
(PIC's), the hold-down release PIC's, and T-0 umbilical release 
PIC's. 

At T minus 00:00:09.3. the engine chilldown sequence is 
completed and the GPC's command the LH 2 prevalves open-the 
LCH prevalves were open during loading to permit engine 
chilldown. The MAIN PROPULSION SYSTEM L0 : and LH : 
PREVALVE LEFT. CTR. RIGHT switches on panel R4 are in 
the GPC position. 

At T minus 00:00:16. helium flows out of the nine helium 
supply tanks through the helium isolation valves, the regulators. 
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and check valves and enters the engine at the inlet of the 
pneumatic control assembly (PCA). The PCA is a manifold 
containing solenoid valves to control and direct helium pressure 
under the control of the engine controller to perform various 
essential functions. The valves are energized by discrete on/off 
commands from the output electronics of the engine controller. 
One essential function from T minus 00:00:04 to MECO plus six 
seconds is the purging of the high-pressure oxidizer turbopump 
(HPOT) intermediate seal cavity. This cavity is between two 
seals, one of which contains the hot fuel-rich gas in the oxidizer 
turbine and the other the liquid oxygen in the oxidizer 
turbopump. Leakage through one of both of the seals and mixing 
of the propellants could result in a catastrophic explosion. 
Continuous overload purge of this area prevents the propellants 
from mixing as they are dumped overboard through drain lines. 
The PCA also functions as an emergency backup for closing the 
engine propellant valves with helium pressure. In a normal engine 
shutdown, the engine propellant valves are hydraulically 
actuated. 

At T minus 00:00:06.6. the GPC’s issue the engine start 
command, opening the main oxidizer valve in each engine. 
Between main engine oxidizer valve opening and MECO. LO 2 
flows out of the ET. through the ET LO 2 umbilical and the LO 2 
feedline disconnect valves, and into the LO 2 umbilical and the 
LO 2 feedline disconnect valves and into the LO 2 feedline 
manifold. From this manifold. LO 2 is distributed to the engines 
through the three engine LO 2 feedlines. In each line. LO 2 passes 
through the prevalve and enters the main engine at the inlet to 
the low-pressure oxidizer turbopump (LPOT). In the engine, a 
small portion of the LO 2 is diverted into the oxidizer heat 
exchanger. In the heat exchanger, heat generated by the 
high-pressure oxidizer turbopump (HPOT) is used to convert 
liquid oxygen into gaseous oxygen (GO 2 ). This GO 2 is then 
directed back to the ET to maintain oxidizer tank pressure. The 
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GO 2 flowback to the ET begins at the outlet of the heat 
exchanger. From this point, GO 2 passes through a check valve, 
then splits into two paths, each containing a flow control orifice. 
One of these paths also contains a valve which is normally 
controlled by one of three pressure transducers located in the 
LO 2 tank. Downstream of the two flow control orifices and the 
pressure control valves, the GO 2 lines empty into the ET GO 2 
pressurization manifold. This single line exits the orbiter at the 
GO 2 pressurization disconnect and passes through the ET GO 2 
umbilical into the top of the LO 2 tank. 


At T minus 00:00:06.6, if the PIC voltages are within limits 
and all three engine controllers are indicating engine ready, the 
GPC’s will issue the engine start commands to the three SSME’s. 
If the PIC conditions are not met in four seconds, the engine 
start commands will not be issued, and the GPC’s will proceed to 
a countdown hold condition. 

At T minus 00:00:06.6, the GPC’s issue the engine start 
command, opening the main fuel valve in the engine. Between 
main fuel valve opening and MECO, LEb flows out of the ET 
through the ET LEb umbilical and the LEb feedline disconnect 
valve into the LEb feedline manifold. From this manifold, LEb is 
distributed to the engines through the three engine LEb 
feedlines. In each line, LEb passes through the prevalve and 
enters the main engine at the inlet to the low-pressure fuel 
turbopump (LPFT). In the engine, the LEb is used to cool 
various engine components and in the process is converted to 
gaseous hydrogen (GEb). The majority of this GEb is burned in 
the engine; a smaller portion is directed back to the ET to 
maintain LH 2 tank pressure. GEb flowback to the ET begins at 
the turbine outlet of the LPFT. GEb tapped from this line first 
passes through a check valve and then splits into two paths, each 
containing a flow control orifice. One of these paths also 
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contains a valve normally controlled by one of three pressure 
transducers located in the LH 2 tank. 


If all three SSME’s reach 90 percent of their rated thrust at 
T minus 00:00:03 seconds after the ignition command was issued, 
and approximately 3 seconds have elapsed from the time when 
all engines are at 90 percent to permit vehicle base bending load 
models to return to a minimum, the GPC’s will issue the 
commands to fire the SRB ignition PIC’s, the hold-down release 
PIC’s, and the T-0 umbilical release PIC’s. At T-0 liftoff occurs 
almost immediately because of the extreme rapid thrust buildup 
by the SRB’s. 


If one or more of the three SSME’s do not reach 90 percent 
of their rated thrust in less than 4.6 seconds from the SSME 
ignition command, all SSME’s will be shut down, the SRB’s will 
not be ignited, and a countdown hold condition will exist. 
Between liftoff and MECO, as long as the SSME’s perform 
nominally, all MPS sequencing and control functions will be 
executed automatically by the GPC’s. During this time period, 
the flight crew will monitor MPS performance, back up auto¬ 
matic functions, if required, and provide manual inputs in the 
event of MPS malfunctions. 

Beginning at T-0, the SSME gimbal actuators, which were 
locked in their special pre-ignition positions, are first commanded 
to their null positions for SRB start and then allowed to operate 
as needed for thrust vector control. 

During ascent, LH 2 tanks pressure is maintained between 
1707 and 1811 mmHg (33 and 35 psia) by the orifices in the two 
lines and the action of the flow control valve. When pressure in 
the LH 2 tank reaches 1811 mmHg (35 psia), the valve closes, and 
when pressure drops below 1707 mmHg (33 psia), the valve 
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opens. Tank pressures greater than 1914 (37 psia) will cause the 
tank to relieve through the tank vent valve. If tank pressure falls 
below a 1707 nimHg (33 psia) (LH 2 engine manifold pressure 
less than 1759 mmHg (34 psia) or rises above 1811 mmHg 
(35 psia), the flight crew will position the MPS LH 2 ULLAGE 
PRESS switch on panel R2 to the OPEN position. This allows the 
three flow control valves to go to the full-open position. 
Normally the MPS LH 2 ULLAGE PRESS switch is in the AUTO 
position. Downstream of the two flow control orifices and the 
flow control valves, the GH 2 lines empty into the ET GH 2 
pressurization manifold. This single line then exits the orbiter at 
the GH-> pressurization disconnect and passes through the ET 
GH-t umbilical into the top of the LH 2 tank. During ascent LO 2 
tank pressure is maintained between 1035 and 1138 mmHg (20 
and 22 psia) by the orifices in the two lines and the action of the 
flow control valve. When pressure in the tanks reaches 1138 
mmHg (22 psia), the valve closes. When pressure drops below 
1035 mmHg (20 psia), the valve opens. LO 2 tank pressure greater 
than 1242 mmHg (24 psia) will cause the tank to relieve through 
the tank vent and relief valves. 

The normal SSME thrust level setting for the initial devel¬ 
opment flight tests at liftoff is 100 percent: in later operational 
missions, some high-orbit missions and missions involving heavy 
payloads may require the maximum thrust setting of 
109 percent. The initial thrust level is normally maintained until 
approximately 31 seconds into the mission, when the GPC’s 
throttle the engines to 65 percent. The purpose of the lower 
throttle setting is to minimize structural loading when the orbiter 
is passing through the region of maximum aerodynamic pressure 
(max Q). This normally occurs around 63 seconds mission 
elapsed time. At approximately 65 seconds, the engines are once 
again throttled to 100 percent and remain at that setting until 
approximately 00:07:44 mission elapsed time. 


The SRB’s burn out at approximately 00:02 minutes mission 
elapsed time and are separated from the orbiter by GPC 
command, via the mission events controller and the SRB 
separation PIC’s. The flight crew can initiate SRB separation 
manually in the event of an automatic sequence failure. 

Beginning at approximately 00:07:40 mission elapsed time, 
the engines are throttled back to maintain vehicle acceleration at, 
or less than, three gs. The 3-g limit is an operational limit devised 
to prevent physical stresses on the flight crew. Approximately 
eight seconds before MECO, the engines are throttled back to 
65 percent. 

Although MECO is based on the attainment of a specified 
velocity, the engine can also be shut down due to LO 2 depletion 
before the specified velocity of MECO is reached. LO 2 depletion 
is sensed by four oxidizer depletion sensors located in the LO 2 
feedline manifold. Any two of the four sensors indicating a dry 
condition will cause the GPC’s to issue a MECO command to the 
engine controllers. 

The engine can also be shut down by LH 2 depletion should it 
occur before the specified velocity is reached. LH 2 depletion is 
sensed by four fuel depletion sensors located in the bottom of 
the LH 2 tank. Any two of the four sensors indicating a dry 
condition will cause the GPC’s to issue a MECO command to the 
engine controller. 

Once MECO has been confirmed, the GPC’s will execute the 
ET separation sequence. The ET separation sequence requires 
approximately 11 seconds and includes arming of the ET 
separation PIC’s, closure of the LO 2 and LH 2 prevalves, firing of 
the ET tumble system pyrotechnic, LH 2 and LCb feedline 
disconnect valve closure, gimbaling of the SSME’s to the MPS 
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propellant dump position (full down), ET signal conditioners 
power off (deadfacing), firing of umbilical unlatch pyrotechnics, 
and retraction of the umbilical plate hydraulically. 

At this point, the GPC’s check for ET separation inhibits. If 
the vehicle’s pitch, roll, and yaw rates are not less than 
0.2 degrees/second, automatic ET separation is inhibited. If these 
conditions are met, the GPC’s will issue the commands to the ET 
separation pyrotechnics. In manual ET separation or return to 
launch site (RTLS) aborts, the inhibits are overriden. 

At separation, the orbiter begins a reaction control system 
minus-Z translation separation maneuver to move it away from 
the ET. This maneuver takes approximately 13 seconds and 
results in a negative-Z delta component of approximately three 
meters per second (11 feet per second). 

Once MECO has occurred due to the specified velocity 
attainment or due to LCb or LEb sensor depletion and before ET 
separation, the GPC’s will isolate the orbiter LHb feedline from 
the ET by closing the LEb feedline disconnect valve (actually 
two valves, one on each side of the separation interface) and the 
LO 2 feedline disconnect valve (also two valves, one on each side 
of the separation interface). At orbiter/ET separation, the G(b 
feedline is sealed at the separation interface by action of the 
self-sealing quick-disconnect as is the GH 9 feedline. 

The MPS pneumatic control assembly on each SSME provides 
an emergency backup mode of closing the engine propellant 
valves pneumatically by helium pressure. The normal engine 
shutdown of the engine propellant valves is by hydraulic 
actuation. 
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At MECO the GPC’s will open the LO 2 feedline relief 
isolation valve, allowing any pressure buildup generated by 
oxidizer trapped in the orbiter LO 2 feedline manifold to be 
vented overboard through the relief valve, providing that the 
MAIN PROPULSION SYSTEM FEEDLINE RLF ISOL L0 2 
switch on panel R4 is in the GPC position. The GPC’s will also 
open the LH 2 feedline relief isolation valve, allowing any 
pressure buildup of fuel trapped in the orbiter LHb feedline 
manifold to be vented overboard through the relief valve, 
providing that the MAIN PROPULSION SYSTEM FEEDLINE 
RLF ISOL LH 2 switch on panel R4 is in the GPC position. 

At MECO, the pneumatic control assembly for each engine 
performs a 6-second purge of the engine preburner oxidizer 
domes and a 2-second post-charge of the pogo accumulator. This 
purge ensures that no residual propellant remains in these areas 
to cause an unsafe condition and to prevent a water hammer 
effect in the LO 2 manifolds of the SSME. This helium usage and 
the high-pressure oxidizer turbopump (HPOT) intermediate seal 
cavity purge can be observed on the MPS HELIUM L, C, R 
meters on panel F7 and are also available on the CRT. 

At MECO, the RTLS LH 2 dump vlaves will be opened for 30 
seconds to ensure that the LH 2 manifold pressure does not result 
in operation of the LH 2 feedline relief valve. 

After the 6-second purge is completed, the GPC’s inter¬ 
connect the pneumatic helium and engine helium supply system 
by opening the three “out” interconnect valves providing that 
the MPS He INTERCONNECT LEFT, CENTER, RIGHT 
switches on panel R2 are in the GPC position. This connects all 
ten helium supply tanks to the common manifold and ensures 
there is sufficient helium available to perform the LO 2 and LH 2 
propellant dumps, which is required after ET separation. 
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After ET separation, there are still approximately 771 
kilograms (1700 pounds) of propellants trapped in the SSME's 
and an additional 1678 kilograms (3700 pounds) of propellants 
trapped in the orbiter propellant management system. This 2449 
kilograms (5400 pounds) of propellant represents an overall 
center of gravity (c.g.) shift for the orbiter of approximately 17 
centimeters (7 inches). Non-nominal center-of-gravity locations 
can create major guidance problems during reentry. The residual 
LO 2 , by far the heavier of the two propellants, poses the greatest 
impace on c.g. travel. The greatest hazard from the trapped LH 2 
occurs during reentry, when any LH 2 /GH 2 remaining in the 
propellant lines may combine with atmospheric oxygen to form a 
potentially explosive mixture. In addition, unless dumped over¬ 
board, the trapped propellants will sporadically outgas through 
the orbiter LCb and Lfb feedline relief valves, causing vehicle 
accelerations which are of such a low-level that they cannot be 
sensed by onboard guidance, yet represnet a significant source of 
navigation error when applied over an entire mission. Outgassing 
propellants are also a potential source of contamination for 
scientific experiments contained in the payload bay. 

At approximately 11 seconds after MECO, the ET separates 
from the orbiter. Approximately 109 seconds later, the orbital 
maneuvering system (OMS) 1 thrusting begins. Coincident with 
the start of the OMS-1 thrusting, the GPC’s automatically initiate 
the LCb dump, providing that the MPS PRPLT DUMP SE¬ 
QUENCE LO 2 switch on panel R2 is in the GPC position. The 
GPC commands the two LO 2 manifold repressurization valves 
open, providing that the MAIN PROPULSION SYSTEM MANF 
PRESS LO 2 switch on panel R4 is in the GPC position and 
command each engine controller to open that SSME main 
oxidizer valve. And the GPC commands the three LCb prevalves 
open, providing that the MAIN PROPULSION SYSTEM L0 2 
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PREVALVES LEFT, CTR, RIGHT are in the GPC position. The 
LO 2 trapped in the orbiter feedline manifold is expelled under 
pressure from the helium sybsystem through the engine bell of 
each SSME. If the MAIN PROPULSION, SYSTEM MANF 
PRESS LO 2 switch on panel R4 is left in the GPC position, the 
LO 2 dump continues for 105 seconds. At the end of this period, 
the GPC’s automatically terminate the dump by closing the two 
LO 2 manifold repressurization valves, wait ten seconds and then 
close the three LO 2 prevalves and command that engine 
controller to close that engine main oxidizer valve. 

If necessary, the flight crew can perform the LO 2 dump 
manually by utilizing the START and STOP positions of the MPS 
PRPLT DUMP SEQUENCE LO 2 switch on panel R2. When the 
LO 2 dump is performed manually, all valve opening and closing 
sequences are still automatic. Positioning the MPS PRPLT DUMP 
SEQUENCE LO 2 switch to the START position causes the GPC’s 
to immediately begin commanding all of the required valves to 
open automatically and in the proper sequence. The LO 2 dump 
would continue as long as the switch is in the START position. 
Placing the switch to the STOP position would cause the GPC’s 
to begin commanding all of the required valves closed automa¬ 
tically and in the proper sequence. The earliest time a manual 
L<b dump can be performed is MECO plus ten seconds since the 
SSME’s require a cooldown of at least ten seconds after MECO. 

The GPC’s software, MPS dump sequence will automatically 
initiate the LO 2 dump at one time only-at initiation of the 
OMS-1 thrusting period. If the MPS PRPLT DUMP SEQUENCE 
LO 2 switch on panel R2 is not in the GPC position at that time, 
the L(b dump must be initiated manually. In addition, once the 
LCb dump has been initiated and the MPS PRPLT DUMP 
SEQUENCE L(b switch is placed in the STOP position, the 
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GPC’s will no longer monitor any of the positions of this switch. 
For this reason, the LO 2 dump cannot be reinitiated, manually or 
automatically. 

Simultaneously with L0 2 dump, the GPC’s automatically 
initiate the MPS LH 2 dump, providing that the MPS PRPLT 
DUMP SEQUENCE LH 2 switch on panel R2 is in the GPC 
position. The GPC’s command each engine controller to com¬ 
mand a ten-second helium purge of that engine fuel lines 
downstream of the main engine fuel valves, command the LHo 
manifold repressurization valve open, providing that the MAIN 
PROPULSION SYSTEM MANF PRESS LH 2 switch on panel R4 
is in the GPC position, and command the two LH 2 fill/drain 
valve (inboard-outboard) open. 

The LH 2 trapped in the orbiter feedline manifold is expelled 
under pressure from the helium subsystem through the LHo fill 
and drain valves overboard for six seconds. The inboard fill and 
drain valve is then closed, the recirculation valves are opened, and 
flow is through the engine bleed valves into the orbiter MPS 
between the inboard and outboard fill and drain valve and 
overboard through the outboard fill and drain valve for approxi¬ 
mately 180 seconds. 

If necessary, the flight crew can perform the LH 2 dump 
manually by utilizing the START and STOP positions of the MPS 
PRPLT DUMP SEQUENCE LH 2 switch on panel R2. When the 
LH 2 dump is performed manually, all valve opening and closing 
sequences are still automatic. Placing the MPS PRPLT DUMP 
SEQUENCE switch in the START position will cause the GPC’s 
immediately to begin commanding all the required valves open 
automatically and in the proper sequence. The LH 2 dump will 
continue for as long as the switch is in the START position. 
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Placing the switch in the STOP position causes the GPC’s to 
begin commanding all of the required valves closed automatically 
and in the proper sequence. 

At the end of the L0 2 and LH 2 dumps, the GPC’s close the 
helium-out interconnect valves and all of the supply tank 
isolation valves, providing that the MPS He ISOLATION LEFT 
CTR, RIGHT A and B, PNEUMATICS He ISOL, and He 
INTERCONNECT LEFT, CTR, RIGHT switches on panel R2 are 
in the GPC position. 

After the L0 2 and LH 2 dumps are completed, the SSME’s are 
gimbaled to their entry positions. In the entry positions, the 
engine bells are moved inward (toward one another) to reduce 
aerodynamic heating during entry. 

At approximately 00:19:00 mission elapsed time and after 
the MPS L0 2 and LH 2 dumps, the flight crew will initiate the 
procedure for vacuum inerting the orbiter L0 2 and LH 2 lines. 
Vacuum inerting allows any traces of LG 2 or LH 2 remaining after 
the propellant dumps to be vented into space. 

The L0 2 vacuum inerting is accomplished by opening the 
three L0 2 prevalves, the L0 2 inboard fill/drain valve, and the L0 2 
outboard fill/drain valve. These valves are opened by placing the 
MAIN PROPULSION SYSTEM L0 2 PREVALVES LEFT, CTR, 
RIGHT and the PROPELLANT FILL/DRAIN L0 2 OUTBD, 
INBD switch on panle R4 to the OPEN position. 

Helium is provided for valve actuation through the two 
pneumatic helium isolation valves, and these valves are closed by 
the GPC’s at the end of the MPS LH 2 dump. The MPS 
PNEUMATIC He ISOL switch on panel R2 is positioned to 
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OPEN. If additional helium is required to open and/or close the 
fill/drain valves, it can be obtained by opening the engine helium 
supply isolation valves and the out helium interconnect valves. 
These are controlled by placing the MPS He ISOLATION LEFT 
CTR, RIGHT A and B on panel R2 to OPEN and placing MPS He 
INTERCONNECT LEFT, CTR, RIGHT switches on panel R2 to 
INCLOSE/OUT position. These valves were also closed by the 
GPC at the end of the MPS LH 2 dump. 

For LH 2 vacuum inerting, the LH 2 inboard and outboard 
fill/drain valves are opened by placing the MAIN PROPULSION 
SYSTEM PROPELLANT FILL/DRAIN LH 2 OUTBD, INBD 
switches on panel R4 to OPEN. The ET GH 2 pressurization 
manifold will also be vacuum-inerted by opening the H 2 
pressurization line vent valve, by placing the MAIN PROPUL¬ 
SION SYSTEM H 2 LINE VENT switch on panel R4 to OPEN. 

As a result, both LO 2 lines and LH 2 lines will be inerted 
simultaneously. Approximately 30 minutes is allowed for 
vacuum inerting. At the end of the 30 minutes, the flight crew 
will close the LO 2 outboard fill/drain valve by placing the MAIN 
PROPULSION SYSTEM PROPELLANT FILL/DRAIN L0 2 
switch on panel R4 to CLOSE. The three LO 2 prevalves and LO 2 
inboard fill/drain valve will be left open. To conserve electrical 
power after completion of the LO 2 vacuum inerting sequence, 
the MAIN PROPULSION SYSTEM PREVALVES L0 2 LEFT, 
CTR, RIGHT switches on panel R4 are positioned to GPC, and 
the MAIN PROPULSION SYSTEM PROPELLANT 
FILL/DRAIN LO 2 OUTBD, INBD switches on panel R4 are 
placed to the GRD position. These switch positions remove 
power from the opening and closing solenoids of the correspond¬ 
ing valves and, because the valves are pneumatically actuated, 
they remain in their last commanded position. At the end of the 
same 30-minute period, the LH 2 outboard fill/drain valve and the 


) 


) 


H 2 pressurization line vent valve are closed by positioning the 
MAIN PROPULSION SYSTEM PROPELLANT FILL/DRAIN 
LH 2 OUTBD switch on panel R4 to CLOSE and the MAIN 
PROPULSION SYSTEM H 2 PRESS LINE VENT switch on panel 
R4 to CLOSE. The three LH 2 prevalves and the LH 2 inboard 
fill/drain valve are left open. The MAIN PROPULSION SYSTEM 
PREVALVES LEFT, CTR, RIGHT switches on panel R4 will be 
positioned to GPC, also for power conservation, and the MAIN 
PROPULSION SYSTEM PROPELLANT FILL/DRAIN LH 2 
INBD, OUTBD and H 2 PRESS LINE VENT switches on panel 
R4 are positioned to the GRD position to conserve power. The 
H 2 pressurization line vent valve is electrically activated; how¬ 
ever, it is normally closed (spring-loaded to the closed position), 
and removing power from the valve solenoid leaves the valve 
closed. 

After vacuum inerting, the helium isolation valves and 
interconnect valves are closed by placing the MPS He ISOLA¬ 
TION LEFT, CTR, RIGHT, PNEUMATICS He ISOL on panel 
R2 to the CLOSE position and the He INTERCONNECT LEFT, 
CTR, RIGHT switches on panel R2 to GPC. This ensures that the 
helium supply tanks are isolated from any leakage in the 
downstream lines during orbital operations. 

The electrical power is also turned off to each engine 
controller and engine interface unit, and the engine controller 
heaters are placed in the AUTO mode. 

During the early portion of the entry timeline, the propellant 
feedline manifolds and the ET pressurization lines are repres¬ 
surized with helium from the helium subsystem. This prevents 
atmospheric contamination from being drawn into the manifolds 
and feedlines during entry. Removing contamination from the 
manifolds or feedlines can be a long and costly process since it 
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involves disassembly of the affected part. Manifold repres¬ 
surization is a total manual sequence performed by the flight 
crew. 

Manifold repressurization is enabled by opening the LCb and 
Lhh manifold pressurization valves. These valves are controlled 
by the MAIN PROPULSION SYSTEM MANF PRESS L0 2 and 
LH 2 switches on panel R4. The pilot, strapped into his seat, may 
not be able to reach these switches, so before he is strapped in, 
the LCb and LPb MANF PRESS switches are positioned to 
OPEN. ~ 

Later in the entry timeline, the pneumatic helium isolation 
valves will be opened to allow helium How through the manifold 
pressurization valves and into the feedline manifolds and pressuri¬ 
zation lines by placing the MPS PNEUMATICS He 1SOL switch 
on panel R2 to OPEN. In addition, the engine helium isolation 
valves and the out-helium interconnect valves are also opened to 
ensure there is sufficient helium to perform the pressurization by 
placing the MPS He ISOLATION LEFT, CTR, RIGHT A and B 
switches on panel R2 to OPEN and placing the MPS He 
INTERCONNECT LEFT, CTR, RIGHT to INCLOSE/OPEN 
OUT. Because of overboard leakage through the SSME's all of 
the helium subsystems valves opened during the manifold 
repressurization sequence will be left open until vehicle touch¬ 
down and rollout; thus any helium loss caused by overboard 
leakage will be immediately replenished from the helium supply 
tanks. 

The aft compartment is purged by helium from the MPS 
system. The engine valve actuation pneumatic plumbing also has 
two orficed valves located in the aft compartment. These valves 
are controlled by the GPC's. They are opened by the GPCs at 
the same time that the repressurization valve are actuated. 
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If MECO is preceded by a return to launch site (RTLS) abort, 
the subsequent MPS LCb dump will begin ten seconds after the 
ET separation command is issued, and, simultaneously, the Lfb 
dump will also begin. The LO 2 and LHo dump is initiated and 
terminated automatically by the GPCs regardless of the MPS 
PRPLT DUMP SEQUENCE LCQ and LH 2 switch positions on 
panel R2. 

Because of the geometry of the LCb feedline manifold and its 
orientation to the orbiter’s acceleration vector during RTLS 
abort, little LCb is actually lost overboard during the LO 2 dump. 
For this reason, the RTLS LO 2 dump is considered more of a 
venting process than a dump. In the nominal LO 2 dump, the 
GPCs terminate the dump 180 seconds or at 30,480 meters 
(100.000 feet), whichever occurs first, after initiation. The LO 2 is 
dumped through the bell of each SSME; however, each engine is 
gimbaled to the entry stow position rather than the normal dump 
position. The LO 2 feedling manifold is not pressurized in this 
mode, and the two LO 2 manifold repressurization valves remain 
closed throughout the entire dump. No vacuum inerting or 
system repressurization is performed in an RTLS abort. The 
MAIN PROPULSION SYSTEM PREVALVES LC 2 , LEFT, CTR 
RIGHT switches on panel R4 are in the GPC position, and the 
GPC’s command that engine controller to open each engine main 
oxidizer valve for the dump. 


In the RTLS mode, the LH 2 dump is initiated and 
terminated automatically by the GPC’s and simultaneously with 
the LCb dump regardless of the position of the MPS PRPLT 
DUMP SEQUENCE LH 2 switch on panel R2. The LHo dump 
opens the two RTLS dump valves and the two RTLS manifold 
repressurization valves. The LH 2 trapped in the feedline manifold 
is expelled, under pressure from the helium subsystem, through a 
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special opening on the port side of the orbiter between the wing 
and the orbital maneuvering system (OMS) pod. The GPC’s will 
terminate the LH2 dump automatically when the orbiter reaches 
30,480 meters (100,000 feet). At that time, the inboard and 
outboard RTLS dump valves are closed, and the two RTLS 
manifold repressurization valves are closed. No vacuum inerting 
or system repressurization is performed following an RTLS LHo 
dump. 

CONTRACTORS. The Rocketdyne Division of Rockwell 
International, Canoga Park, Calif., is prime contractor for the 
Space Shuttle main engines. Other contractors include Aeroflex 
Laboratories, Plainview, N.Y. (MPS vibration mounts); Airite 
Division, Sargent Industries, El Segundo, Calif. (MPS surge 
pressure receiver); Ametek Calmec, Pico Rivera, Calif. 
(1-1/2 inch and 2-inch LO2 and LH2 shutoff valve, 4-inch LH2 
disconnect, 2-inch GH2/GO2 disconnect); Ametek Straza, 
El Cajon, Calif. (8-inch LH2/LO2 fill/drain, 2-inch and 4-inch 
LH2 recirculation lines, high point bleed line manifold, gimbal 
joint); Arrowhead Products, Division of Federal Mogul, 
Los Alamitos, Calif. (12 to 17-inch diameter LO2 and LH2 
feedlines, flexible purge gas connector); Astech, Santa Ana, 
Calif. (MPS heat shield); Brunswick, Lincoln, Neb. 
(17.3-cubic-foot and 4.7-cubic-foot capacity helium tanks); 
Brunswick-Circle Seal, Anaheim, Calif, (helium check valves, 
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GO2 and GH2 1-inch helium pressurization line, 3/8-inch LH2 
relief valve, engine isolation check valves); Brunswick-Wintec, 
El Segundo, Calif, (helium filter); Coast Metal Craft, Compton, 
Calif, (metal flex hose), Conrac Corp., West Caldwell, N.J. 
(engine interface unit); Consolidated Controls, El Segundo, 
Calif, (oxygen primary flow control hydraulic valve, 
hydrogen/oxygen pressurant flow control valves, 20-psi helium 
regulator, 850-psi helium relief valve, 750-psi helium regulator); 
Fairchild Stratos, Manhattan Beach, Calif. (12-inch prevalves, 
1 -1/2 inch LO2 disconnect, 8-inch LO2 and LH2 fill and drain 
valves and GN2 and GH2 disconnects); Gulton Industries, Costa 
Mesa, Calif, (pogo pressure transducer); K-West, Westminster, 
Calif. (LO2 and LH2 external tank ullage pressure signal 
conditioner, MPS differential pressure transducer and electronics 
propellant head pressure); Megatek, Van Nuys, Calif. (MPS line 
flange cryo seals); Moog, Inc., East Aurora, N.Y. (main engine 
gimbal actuators); Parker Hannifin Corp., Irvine, Calif. (1-inch 
relief isolation valves, pogo check valves, 17-inch LH2 and LO2 
disconnects, 8-inch LO2 and LH2 disconnects, LO2 and LH2 
relief valves); Simmonds Precision Instruments, Vergennes, Ver. 
(LO2 and LH2 point sensors and electronics); Sterer Engineering, 
Los Angeles (main engine hydraulic solenoid shutoff valve); 
Whittaker Corp., North Hollywood, Calif. (750/20-psi helium 
regulator); Wright Components, Inc. Clifton Springs, N.J. 
(two-way pneumatic solenoid valve, three-way helium solenoid 
valve, hydraulic latching solenoid valve). 
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ORBITER-EXTERNAL TANK SEPARATION SYSTEM 


This sytem separates the orbiter from the external tank at 
three structural points and two umbilicals. Separation of the 
orbiter and external tank occurs just before orbit insertion, and is 
triggered automatically by the orbiter computers. Orbiter crew¬ 
men also can initiate separation. 

The forward structural attachment consists of a shear bolt 
unit mounted in a spherical bearing. The bolt separates at a 
specified break area when two pressure cartridges are initiated. 
The pressure from one or both cartridges drives a tandem piston 
to shear the bolt with the second piston acting as a hole plugger 
to fill the cavity left by the sheared bolt. A centering mechanism 
rotates the unit from the displacement position to a centered 
position aligning the bearing flush with the adjacent thermal 
protection system moldline. 

The aft structural attachment consists of two special bolts 
attaching the external tank strut hemisphere to the orbiter left 
and right-side cavities by pyro-actuated frangible nuts. At separa¬ 
tion the frangible nuts are split by a booster cartridge initiated by 
a detonator cartridge. The attach bolts are driven by the separa¬ 
tion forces and a spring into a cavity in the tank strut. The 
frangible nut, cartridge fragments and hot gases are contained 
within a cover assembly and a hole plugger isolates the fragments 
within the container. 

The orbiter-external tank umbilical plate separation consists 
of right and left assemblies. Each assembly contains three dual¬ 
detonator frangible nut/bolt combinations that hold the orbiter 
and external tank umbilical plates together during mated flight. 
Each bolt has a retraction spring which, after release of the nut, 
retracts the bolt to the external tank side of the interface. On 
the orbiter side, each frangible nut with its detonators is enclosed 
in a debris container that contains nut fragments and hot gases 


generated by operation of the detonators, either of which will 
fracture the nut. Each orbiter umbilical plate has three hydraulic 
retractors which, after release of the three frangible nut/bolt 
combinations retract the plate approximately 66 millimeters 
(2-1/2 inches). The retraction disconnects the orbiter-external 
tank electrical umbilical in the first 12.7 millimeters (0.5 inch) of 
travel, releases the fluids between the disconnected LO2 and LH2 
shutoff valves, and (as a secondary function of the retract motion 
through linkage) closes the LO2 and LH2 main feedline discon¬ 
nect valves. A dedicated MPS pneumatic helium supply is the 
primary MPS valve closing system. Each orbiter umbilical plate 
has three bungees that hold the plate in the lateral position after 
separation from the external tank umbilical plate. 

An electromechanical actuation system operates two separate 
doors to cover the left and right umbilical cavities after the 
external tank is jettisoned and umbilical plates are retracted. 
Normal operation of the doors by the flight crew is manual. Each 
door is approximately 1270 millimeters (50 inches) square. 

The doors are held fully open during liftoff and ascent by 
two centerline latches, one forward and one aft, each latch 
engaging both doors. After tank separation two redundant a.c. 
motors operate each electromechanical actuator to rotate and 
retract the latch blade flush with the orbiter thermal protection 
system moldline. The hinges and door actuation system is 
located on the inboard edge of each door. Two redundant a.c. 
motors operate an electromechanical actuator to open or close 
each door through a system of bellcranks and pushrods. 

When the door is within 50 millimeters (2 inches) of the 
closed position ready-to-latch indicators activate the uplatch 
system. Two redundant a.c. motors provide the power to drive 
three uplatch hooks that engage rollers near the outboard edge 
of the door and hold the door closed for entry. 
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External Tank-Orbiter Disconnect Valves 



Release 
Position 

Latch 
Mechanism 


Centerline latch system 
locks doors in open 
position 

Drive system opens 
and closes doors 

Latch system locks 
in closed position 


Centerline 
Latch 


Orbiter Umbilical Doors 


ORB/ET UMBILICAL CLOSEOUT DOORS 


OPERATIONAL SEQUENCE 



Orbiter/External Tank Umbilical Door Operational Sequence 


Each umbilical door is covered with reusable surface insula¬ 
tion. An aerothermal barrier which requires 310 mmHg (6 
pounds per square inch) to compress is incorporated on each 
door to seal the door tiles with adjacent tiles. In the develop¬ 
ment flight tests, cameras will view separation through the 
umbilical doors before closure. 

The right and left umbilical doors are controlled by the ET 
UMBILICAL DOOR switches located on the flight deck display 
and control panel R2. The right and left umbilical doors are con¬ 
trolled automatically in RTLS aborts and are controlled man¬ 
ually by the flight crew upon completion of the orbital ma¬ 
neuvering system (OMS) thrusting period in all other sequences. 
It is noted that the automatic mode can be used to provide a 
backup to the manual sequence. 

The manual sequence is enabled by positioning the ET 
UMBILICAL DOOR MODE switch on panel R2 to MAN (manual). 
The STOW position of the ET UMBILICAL DOOR CENTER- 
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LINE LATCH switch on panel R2 releases the two umbilical door 
centerline latches and stows both centerline latches. The ET 
UMBILICAL DOOR CENTERLINE LATCH talkback indicator 
indicates STO (stow) when the latches complete their motion in 
six seconds. The GRD (ground) position of the ET UMBILICAL 
DOOR CENTERLINE switch is used to isolate STOW command 
stimuli from motor control assembly relays. Prior to release of 
the centerline latches the ET UMBILICAL DOOR CENTERLINE 
LATCH talkback indicates BARBERPOLE. 

The manual control of opening or closing the right and left 
umbilical door is controlled by the respective LEFT and RIGHT 
ET UMBILICAL DOOR OPEN, CLOSE, OFF switch on panel 
R2. The CLOSE position commands the respective door closed 
in approximately 24 seconds and when the door reaches its 



Orbiter/External Tank Umbilical Closeout Doors - 
Hinge/Actuation System 



Orbiter/External Tank Umbilical Closeout Doors - 
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limit of travel, the electrical motors are automatically turned off. 
The LEFT and RIGHT ET UMBILICAL DOOR talkback indi¬ 
cator above the respective switch on panel R2 indicates OP 
(open) prior to door closure, BARBERPOLE when the door is in 
transit, and CL (close) when two of the three ready-to-latch 
switches for that door has sensed door closure. The OFF posi¬ 
tion of the respective switch, removes electrical power from the 
manual door closure sequence. The OPEN position of the 
respective switch is used for ground operations. 

The manual control of latching or releasing the right and 
left umbilical door is controlled by the respective LEFT and 
RIGHT ET UMBILICAL DOOR LATCH, RELEASE, OFF, 
LATCH switch on panel R2. The LATCH position commands 
the respective door latches to their latched positions in approxi¬ 
mately six seconds, providing two of the three ready-to-latch 
switches have sensed door position and the latches hold the door 
closed. The LEFT and RIGHT ET UMBILICAL DOOR, talkback 
indicator above the respective switch on panel R2, indicates REL 
(release) during ascent, BARBERPOLE when that door is in 
transit, and LAT (latch) when that door is in its latched position. 
The OFF position of the respective switch, removes electrical 
power from the door latch closure sequence. The REL (release) 
position of the respective switch is used for ground operations. 

The automatic sequence of the left and right umbilical 
doors occurs during the return-to-launch site (RTLS) abort. The 
automatic sequence can be performed with the ET UMB DOOR 
MODE switch on panel R2 in the manual or GPC position. Two 
seconds alter external tank (ET) separation the centerline latches 
release the doors and the latches are stowed. The ET UMBIL¬ 
ICAL DOOR CENTERLINE LATCH talkback indicator will 
indicate STO when the centerline latches complete their motion 
at ET separation plus eight seconds. The left and right umbilical 
doors are closed and the ET UMBILICAL DOOR LEFT and 
RIGHT DOOR talkback indicates CL at ET separation plus 32 


( 


seconds. The left and right umbilical door latches, latch the 
doors closed and the ET UMBILICAL DOOR LEFT and RIGHT 
talkback indicates LAT at ET separation plus 38 seconds. 

A curtain is installed at each of the orbiter/external tank 
umbilicals. After ET separation, the residual LO2 is dumped 
through the three Space Shuttle Main Engines and the residual 
LH2 is dumped overboard. The umbilical curtain prevents 
hazardous gases (GO2, GH2) from entering into the orbiter aft 
fuselage through the orbiter umbilical openings prior to umbilical 
door closure. The curtain also acts as a seal during the ascent 
phase of the mission to permit the aft fuselage to vent through 
the orbiter purge and vent system, thereby providing protection 
to the orbiter aft bulkhead at station 1307. 




Orbiter/External Tank Umbilical Closeout Curtain 
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Various parameters are monitored and displayed on the 
flight deck control panel and CRT (cathode ray tube) and trans¬ 
mitted by telemetry. 


Contractors for the separation system include Hoover 
Electric, Los Angeles (external tank umbilical door centerline 
latch and actuator, umbilical door actuator, and umbilical door 


) 


i 


latch actuator), U.S. Bearing, Chatsworth, Calif, (external tank- 
orbiter spherical bearing); Bertea Corp., Irvine, Calif, (umbilical 
retractor actuator), Space Ordnance Systems Division, Trans 
Technology Corp., Saugus, Calif, (orbiter-external tank separa¬ 
tion bolt/cartridge detonator assembly, 3/4-inch frangible nut 
orbiter-external tank umbilical separation and 2-1/2 inch 
frangible nut/pyro components in orbiter/external tank aft 
attach separation system). 


147 








Space Transportation System 


SPACE SHUTTLE COORDINATE SYSTEM 


The Space Shuttle coordinate reference system is a means of 
locating specific points on the Shuttle. The system is measured 
in inches and decimal places: X 0 designates the longitudinal 
(forward and aft) axis, Y 0 the lateral (inboard and outboard) 
axis, and Z Q the vertical (up and down) axis. The subscript 0 
indicates orbiter; similar reference systems are used for the 
external tank (T), solid rocket booster (B), and overall Space 
Shuttle System (S). 

In each coordinate system, the X-axis zero point is located 
forward of the nose tip; that is, the orbiter nose tip location is 
236 inches aft of the zero point (at X Q 236); the external tank 
nose cap tip location is at Xy 322.5, and the solid rocket booster 
(SRB) nose tip location is at Xg 200. In the orbiter, the hori¬ 
zontal X 0 , Y 0 reference plane is located at Z 0 400, which is 
336.5 inches above the external tank horizontal Xy, Yy reference 
plane located at Zy 400. The solid rocket booster horizontal 
Xg, Yg reference plane is located at Zg 0 and coincident with 
the external tank horizontal plane at Zy 400. The solid rocket 
booster central vertical Xg, Zg planes are located at +Yg 250.5 
and -Yg 250.5. Also, note that the orbiter, external tank, and 
Shuttle system center X, Z planes coincide. 

From the X = 0 point, aft is positive, and forward is nega¬ 
tive for all coordinate systems. Looking forward, each Shuttle 
element Y-axis point right of the center plane (starboard) is 
positive and left of center (port) is negative. The Z axis of each 
point within all elements is positive with Z = 0 located below the 


element, except for the SRB’s, in which each Z-coordinate point 
below the SRB Xg, Yg reference plane is negative and each point 
above that plane is positive. 

The Shuttle system and Shuttle element coordinate systems 
are related as follows: The external tank Xy 0 point coincides 
with Xg 0, the SRB Xg 0 point is located 543 inches aft, and the 
orbiter Y 0 , Z Q reference plane is 741 inches aft of Xg 0. 



Coordinate Systems 
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ORBITER STRUCTURE 


The orbiter structure is divided into major sections: the 
forward fuselage, which consists of upper and lower sections that 
fit clam-like around a pressurized crew compartment; wings; mid 
fuselage; payload bay doors; aft fuselage; and the vertical tail. 
The majority of the structures are of conventional aluminum 
construction protected by reusable surface insulation. 

The forward fuselage structure is composed of 2024 
aluminum alloy skin-stringer panels, frames, and bulkheads. 

The crew compartment, which is supported within the 
forward fuselage at four attachment points, is welded to create a 
pressure-tight vessel. The three-level compartment has a side 
hatch for normal passage and a hatch from the airlock into the 
payload bay for extra-vehicular activity (EVA) and intra- 
vehicular activity (IVA). 

The mid fuselage is an 18.28-meter (60-foot) section of 
primary load-carrying structure between the forward and aft 
fuselages. It includes the wing carry-through structure and the 
payload bay doors. The skins are integral-machined aluminum 
panels and aluminum honeycomb sandwich panels. The frames 
are constructed as a combination of aluminum panels with 
riveted or machined integral stiffeners and a truss structure 
center section. The upper half of the mid fuselage consists of 
structural payload bay doors hinged along the side and split at 
the top centerline. The doors are graphite epoxy frames and 
honeycomb panel construction. 

The aft fuselage includes a truss-type internal structure of 
diffusion-bonded elements that transfers the main engine thrust 
loads to the mid fuselage and external tank. The aft fuselage 
external surface is of standard construction except for the 
removable orbital maneuvering system/reaction control system 
(OMS/RCS) pods. They are constructed of graphite epoxy skins 



Orbiter Structure 

and frames. An aluminum bulkhead heat shield with reusable 
insulation at the rear of the orbiter protects the main engines. 

The wing is constructed of conventional aluminum alloy. 
Corrugated spar web, truss-type ribs and riveted skin-stringer and 
honeycomb covers are used. The elevons are of aluminum 
honeycomb and are split into two segments to minimize hinge 
binding and interaction with the wing. 

The vertical tail, a conventional aluminum alloy structure, is 
a two-spar, multi-rib, integrally machined skin assembly. The tail 
is attached to the aft fuselage by bolted fittings at the two main 
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Upper 

Forward 

Fuselage 

• Skin-Stringer 


Crew Compartment 
• Floating 
•Welded Skin 


Payload Bay 
Doors 

• 2 Doors Split 
at Vertical 
•Graphite epoxy 



Vertical Stabilizer 

• Skin and Stringer 
Fin Covers 

• Honeycomb Rudder 
Cover 

• Machined Spars 

• Sheet Metal Ribs 




Forward RCS 
Module 

•Skin-Stringer 



OMS/RCS 

• Skin-Stringer 

• Graphite Epoxy 
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Body Flap 



Lower Forward 
Fuselage 

•Skin-Stringer 




Mid Fuselage 

•Skin-Stringer 


Wing 

• Skin-Stringer 
Covers 

• Web and Truss Spars 

• Elevon Honeycomb 
Coverage 

•Conventional Aluminum Structure 


Aft Fuselage 

• Skin-Stringer 
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•Thrust Structure 

•Aluminum Honey¬ 
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Shield With 
Thermal 
Insulation 



150 


Orbiter Structural Elements 
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Note: All Dimension In Meters (Feet) 


Minimum Ground Clearances 

Meters (Ft) 

Body Flap (Aft End) 

3.67 (12.07) 

Main Gear Door 

0.86 ( 2.85) 

Nose Gear Door 

0.89 ( 2.95) 

Wing Tip 

3.63 (11.92) 


Orbiter Dimensions 


spars. The rudder/speed brake assembly is divided into upper and 
lower sections. Each is also split longitudinally and individually 
actuated to serve as both rudder and speed brake. 

These major structural assemblies are mated and held 
together with rivets and bolts. The mid fuselage is joined to the 
forward and aft fuselage primarily with shear ties, with the mid 
fuselage overlapping the bulkhead caps at stations X 0 582 and 


X o 1307. The wing is attached to the mid fuselage and aft 
fuselage primarily with shear ties, except in the area of the wing 
carry-through. There the upper panels are attached with tension 
bolts. The vertical tail is attached to the aft fuselage with bolts 
that work in both shear and tension. The body flap, which has 
aluminum honeycomb covers, is attached to the aft lower 
fuselage by four rotary actuators. 

FORWARD FUSELAGE 

The forward fuselage consists of the upper and lower 
fuselages. The forward fuselage houses the crew compartment 
and supports the forward RCS module, nose cap, nose gear wheel 
well, nose gear, and nose gear doors. 

The forward fuselage is constructed of conventional 2024 
aluminum alloy skin-stringer panels, frames, and bulkheads. The 
panels are single curvature and stretch-formed skins with riveted 
stringers spaced 76.2 to 127 millimeters (3 to 5 inches) apart. 
The frames are riveted to skin-stringer panels. The major frame 
spacing is 762 to 914.4 millimeters (30 to 36 inches). The 
Y c 378 forward bulkhead is constructed of flat aluminum and 
formed sections riveted and bolted together (upper) and a 
machined section (lower). The bulkhead provides the interface 
fitting for the nose section. 

The nose section contains large machined beams and struts. 
The structure for the nose landing gear wheel well consists of two 
support beams, two upper closeout webs, drag link support 
struts, nose landing gear strut and actuator attachment fittings, 
and the nose landing gear door fittings. The two (left and right) 
landing gear doors are attached by hinge fittings in the nose 
section. The doors are constructed of aluminum alloy honey¬ 
comb. The left door is wider than the right, although both are 
the same length. Each door has an up-latch fitting at the forward 
and aft ends to lock the doors closed when the gear is retracted. 
Each door has a pressure seal in addition to a thermal barrier. 
Ballast provisions are provided in the nose wheel well and on the 
X 0 378 bulkhead for weight and center of gravity control. The 
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• Aluminum Construction 

• Riveted Skin-Stringer/Frame Structure 

Forward Fuselage Structure 

ballast is lead and the provisions in the nose wheel well will 
accomodate 612.36 kilograms (1,350 pounds) and the X 0 378 
bulkhead will accomodate a maximum of 1,206.57 kilograms 
(2,660 pounds). 


The forward fuselage carries the basic body bending loads (a 
tendency to change the radius of a curvature of the body) and 
reacts nose landing gear loads. 



Upper Forward Fuselage 
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Lower Forward Fuselage 
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Upper Forward Fuselage Being Mated to Lower Forward Fuselage 


The forward fuselage will be covered with the reusable 
thermal protection system, except for the six windshields, 
two overhead windows, side hatch window, and some of the area 
around the forward RCS engines. The nose cap is also a reusable 
thermal protection system It is constructed of reinforced 
carbon-carbon and will have thermal barriers at the nose 
cap-structure interface. 

In the forward fuselage skin are structural provisions for 
installation of antennas, the deployable air data probes, and the 


door eyelet openings for the two star trackers. An opening in the 
upper forward fuselage is required for star tracker viewing. The 
opening has a door for environmental control. 

The forward orbiter/external tank attach fitting is provided 
by the X 0 378 bulkhead and skin panel structure aft of the nose 
gear wheel well. Purge and vent control is provided with 
installation of flexible boots between the forward fuselage and 
crew compartment around the windshield windows, overhead 
observation window, crew hatch window, and star tracker 
opening. Isolation between the forward fuselage and payload bay 
is provided by a flexible membrane between the forward fuselage 
and crew compartment at X 0 582. 

The six forward outer-pane windshields are installed on the 
forward fuselage and are described in the section on windows. 
The window structural frames in the forward fuselage are 
five-axis machined parts. 

The overhead ejection panels in the initial development 
flights for the commander and pilot on the forward fuselage 
operate in concert with the crew compartment ejection panels. 
They are described under the crew compartment. 

The forward RCS module is constructed of conventional 
2024 aluminum alloy skin-stringer panels and frames. The panels 
are composed of single-curvature and stretch-formed skins with 
riveted stringers. The frames are riveted to the skin-stringer 
panels. The forward reaction control system module is secured to 
the forward fuselage nose section and forward bulkhead of the 
forward fuselage with 16 fasteners, which permit installation and 
removal of the forward RCS module. The components of the 
forward RCS are mounted and attached to the forward RCS 
module. The forward RCS module will be covered with reusable 
thermal protection in addition to thermal barriers installed 
around the forward RCS module and engine interface and 
forward RCS module interface-attachment area to the forward 
fuselage. 
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Forward RCS Module 


during initial fabrication and assembly and provides for airlock 
installation and removal. Equipment supported in the compart¬ 
ment includes the environmental control life and support system 
(ECLSS), avionics, guidance and navigation (G&N), displays and 
controls (D&C), navigation star tracker base, and crew accommo¬ 
dations for sleeping, waste management, seats, and galley. 

The crew compartment is supported within the forward 
fuselage at only four attach points to minimize the thermal 
conductivity between them. The two major attach points are at 
the aft end of the crew compartment at the flight deck section 
floor level. The vertical load reaction link is on the centerline of 
the forward bulkhead. The lateral load reaction links are on the 
lower segment of the aft bulkhead. 

The compartment is configured to accommodate a crew of 
three on the flight deck with an additional seat for one more on 


The forward fuselage and forward RCS module are built by 
Rockwell’s Space Transportation and Systems Group, Shuttle 
Orbiter Division, Downey, CA. 

CREW COMPARTMENT 

The three-level crew compartment is constructed of 2219 
aluminum alloy plate with integral stiffening stringers and 
internal framing welded together to create a pressure-tight vessel. 
The compartment has a side hatch for normal ingress and egress, 
a hatch into the airlock from the mid deck, and a hatch through 
the aft bulkhead into the payload bay for extra-vehicular 
activity, intra-vehicular activity, and payload bay access. 

Redundant pressure window panes are provided in the 
windshield and in the overhead, aft viewing, and side hatch 
windows; they are described in the window section. The 
approximately 300 penetrations in the pressure shell are sealed 
with plates and fittings. A large removable panel in the aft 
bulkhead provides access to the crew compartment interior 



Avionics Bay No. 2 


Avionics Bay No. 1 


Crew Compartment and Arrangement 
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Crew Compartment 



Crew Compartment 



Wing Glove 


Aft Crew Module 
Lateral Support 
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Crew Compartment-Forward Fuselage Interface 

the flight deck and three in the mid deck for a seven-day mission 
in operational flights. During initial flights, only two crew 
members are assigned. The crew cabin arrangement consists of a 
flight deck, mid deck, and lower level equipment bay. 

The crew compartment is pressurized to 760 plus or minus 
10 millimeters of mercury (mmHg) (14.7 plus or minus 0.2 psia) 
and is maintained at an 80 percent nitrogen and 20 percent 
oxygen composition by the ECLSS, which provides a shirtsleeve 
environment for the flight crew. The crew compartment is 
designed for 828 mmHg (16 psia). 

The crew compartment volume with the airlock in the mid 
deck is 66 cubic meters (2,325 cubic feet). If the airlock is in the 
payload bay, the crew compartment cabin volume is 74 cubic 
meters (2,625 cubic feet). 

The flight deck is the uppermost compartment of the cabin. 
The commander and pilot work stations are positioned side by 
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Crew Compartment Flight Deck 


side in the forward portion of the flight deck. These stations 
have controls and displays for maintaining autonomous control 
of the vehicle throughout all mission phases. In the operational 
flights, directly behind and to the sides of the commander and 
pilot centerline are the mission and payload specialist seats. 
The mission specialist station is located on the right side of the 
orbiter and has controls and displays for monitoring systems, 
communication management, payload operation management, 
and payload/orbiter interface operations. The payload specialist 
station is located on the left side of the orbiter and contains 
controls and displays. 

The forward flight deck including the center console and 
seats is approximately 2.2 meters squared (24 square feet) and 
with the side console control and displays another approximate 
0.3 meters squared (3.5 square feet) is added. If the center 
console is subtracted from the 2.2 meters squared (24 square 
feet) this would amount to approximately 0.4 meters squared 
(5.2 square feet). 

The aft flight deck is approximately 3.7 meters squared 
(40 square feet). 

Between these two aft stations are the on-orbit pilot and 
payload handling stations. These rearward facing stations are 
unoccupied during launch. Orbital operation visibility is pro¬ 
vided by overhead and aft viewing windows. The orbital stations 
contain displays and controls for executing attitude or transla¬ 
tional maneuvers for terminal-phase rendezvous, stationkeeping 
and docking, and payload deployment and retrieval. The pilot 
is normally designated the payload manipulator and docking 
operator; however, the commander can also accomplish these 
functions. 

In the early development flights an escape system is pro¬ 
vided for the commander and pilot. The system consists of the 
seat, ejection/escape panel, energy transmission and system 
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Aft Viewing Aft Station Close-Circuit TV 



sequencing, and panel jettison actuation for non-ejection ground 
entrance and exit. 


Above the commander and pilot ejection seats for the 
development flight tests are overhead ejection panels. The panels 
provide the commander and pilot with an emergency exit or the 
capability of ejecting in the seat through the overhead panel area 
after ejection of the overhead panel. The ejection panel assembly 
consists of crushable honeycomb pads for shock attenuation, 
cable retention between the crew module and forward fuselage 
panel with breakaway hinges, and an inner-outer severance 
system and thruster to propel the severed panel clear of the 
orbiter. 


• Five Operational Stations 



Orbital 

Station 
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For the development flight tests, the commander and pilot’s 
seats have electrical adjustments of fore, aft, up, and down for 
vertical launch and horizontal flight. Both seats have provisions 
for stowage of inflight and emergency equipment. The seats’ 
ejection components consist of seat assembly, seat structure, 
crew restraint, escape controls, seat guidance rails, and attach¬ 
ments to cabin structure and the escape propulsion thruster. The 
escape propulsion thruster provides the energy to propel the seat 
from its normal flight position to its point of separation from the 
orbiter and sustain and stabilize the motion of the escapee for 
orbiter clearance, stabilization/deceleration, seat-crew member 
separation, recovery, and survival systems. 


In the later flights, the ejection seats and components are 
replaced with operational seats. The seat system will have con¬ 
trols for electrically adjusting the seat fore, aft, up, and down 
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Attenuation Pads 




Overhead Ejection Panels - Development Flight Tests 


and for support during vertical launch and horizontal flight and 
tilt for back angle positioning. It also has an inertia reel, which 
allows mobility for performing tasks, and capability for locking 
the seat. The seat will accommodate mounting of a rotational 
controller and stowage of inflight and emergency equipment. 


The operational seats have removable cushions and pads. 
Specialist seats are not adjustable, but have mounting provisions 
for emergency equipment, communication, and biomedical 
monitoring and controls and mechanization to release the seat 
from the flight deck for stowage during zero-g orbital flight. The 
specialists’ seats will have restraint devices and controls to lock 
and unlock the seat back for tilt change and removable cushions 
and pads. The seat is 647 millimeters (25.5 inches) in length and 
393 millimeters (15.5 inches) wide and when folded for stowage 
is 279 millimeters (11 inches) in height. 


In the operational configuration, the left-hand overhead 
window will provide an emergency exit route. 
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Inner Window 
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Emergency Window Exit - Operational Flights 

Directly beneath the flight deck is the mid deck. Access to 
the mid deck-flight deck is by two interdeck openings 660 by 
711 millimeters (26 by 28 inches). A ladder attached to the left 
interdeck access allows easy passage in one-g conditions. The mid 
deck provides crew accommodations. Three avionics equipment 
bays are also located here. The two forward avionics bays utilize 
the complete width of the cabin and extend into the mid deck 
990 millimeters (39 inches) from the forward bulkhead. The aft 
bay extends into the mid deck 990 millimeters (39 inches) from 
the aft bulkhead on the right side of the airlock. Just forward of 
the waste management system is the side hatch. The 
mid deck completely stripped is approximately 14.5 meters 



Normal Crew Entrance and Exit 

squared (160 square feet). In the operational configuration, the 
gross mobility area is approximately 9.29 meters squared (100 
square feet). 


The side hatch in the mid deck is used for normal crew 
entrance/exit and may be operated from within the crew cabin 
mid deck or externally. The pressure side hatch is assembled to 
the crew cabin tunnel through hinges, torque tube, and support 
fittings. The side hatch opens outwardly 90 degrees down with 
the orbiter horizontal or 90 degrees sideways with the orbiter 
vertical. The side hatch is 1016 millimeters (40 inches) in 
diameter. It has a 254 millimeter-diameter (10-inch) clear-view 
window in the center of the hatch. The window consists of 
three panes of glass. The side hatch seal provides a pressure seal 
that is compressed by the side hatch latch mechanisms when the 
hatch is locked closed. A themal barrier of Inconel wire mesh 
spring with a ceramic fiber braided sleeve is installed between 
the reusable surface insulation tiles on the forward fuselage and 
the side hatch. The total weight of the side hatch is 129 kilo¬ 
grams (294 pounds). 
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Crew Compartment Mid Deck 
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Avionics Bays 1 and 2 
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In the initial development flights, an instrumentation unit is 
installed on the mid deck in addition to two potable water tanks 
and two sleep stations. 

In the operational flights, sleep stations and a galley are 
installed in the mid deck; in addition, three passenger seats can 
be installed on the mid deck floor of the same type as the 
specialist seats. Three additional seats can be installed on the 
mid deck for rescue missions if the sleep stations are removed. 

The mid deck also provides a stowage volume of 3.96 cubic 
meters (140 cubic feet). Accommodations are included for 
dining, sleeping, maintenance, exercising, and data management. 
The floor contains removable panels that provide access to the 
ECLSS equipment and stowage beneath the floor in the 
equipment bay. On the orbiter centerline, just aft of the forward 
avionics equipment bay, an opening in the ceiling provides access 
to the inertial measurement units. 

Stowage boxes used to store the flight crew’s personal gear, 
mission-necessary equipment, and experiments use sandwich 
panels of Kevlar/epoxy and nonmetallic core. This reduced the 
weight by 83 percent compared to all aluminum boxes. This is a 
reduction of approximately 68 kilograms (150 pounds). There 
are 42 identical boxes 279 by 457 by 533 millimeters (11 by 18 
by 21 inches) which can be used for stowage. 

An airlock is located in the mid deck. Its dimensions are 
1600 millimeters (63 inches) inside diameter and 2108 milli¬ 
meters (83 inches) in height. The airlock is sized to accommodate 
two fully suited flight crew members simultaneously. All EVA 
gear, checkout panel, and recharge stations are located against 
the internal walls. The airlock has D-shaped hatches 1016 
millimeters (40 inches) in diameter. 

In the operational configuration, the airlock may be re¬ 
moved from the mid deck and positioned in the payload bay 
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TUNNEL ADAPTER DOCKING MODULE 

Airlock Configuration 
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area to provide full-time shirtsleeve access to a Spacelab in the 
payload bay and EVA capability without depressurizing either 
the Spacelab or the crew module. In this configuration, a tunnel 
adapter with the airlock mounted atop the adapter will provide 
EVA capabilities. When the airlock is in the payload bay, insula¬ 
tion is installed on the airlock exterior for protection from the 
extreme temperatures of space. For missions requiring docking 
of two vehicles, a docking module can be substituted for the 
airlock and installed on the tunnel adapter. The docking module 
is extendible and provides an airlock for one crew member for 
EVA when retracted and for two crew members when extended. 

The equipment bay houses the major components of the 
waste management and atmospheric revitalization systems such 
as pumps, fans, lithium hydroxide (LiOH) absorbers, heat 
exchangers, and ducting. This compartment provides stowage 
space for LiOH canisters and five separate spaces for crew equip¬ 
ment stowage with a volume of 0.8 cubic meters (29.92 cubic 
feet). 


The crew compatment is built by Rockwell’s Space 
Transportation and Systems Group, Shuttle Orbiter Division, 
Downey. CA. The ejection set contractor is Lockheed-California 
Co.. Burbank, CA. The operational crew seat contractor is AMI, 
Colorado Springs CO. 

FORWARD FUSELAGE AND CREW COMPARTMENT 
WINDOWS 

The orbiter windows provide visibility for entry, landing, 
and on-orbit operations. For atmospheric flight, the flight crew 
needs forward, left, and right viewing areas. On-orbit mission 
phases require visibility for rendezvous, docking, and payload 
handling. 

The six windows located at the forward flight deck com¬ 
mander and pilot stations provide the forward, left, and right 
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Flight Deck Windows 

viewing. The two overhead windows and two payload viewing 
windows at the aft station location on the flight deck provide 
rendezvous, docking, and payload viewing. A window in the mid 
deck side hatch is for viewing by a crew person from that position. 

The six planform-shaped forward windows are the largest 
pieces of glass ever produced in the optical quality for see- 
through viewing. Each consists of three individual panes. The 
innermost pane is constructed of tempered aluminosilicate glass 
to withstand the crew compartment pressure. It is 15.7 milli¬ 
meters (5/8 of an inch) thick. Aluminosilicate glass is a low 
expansion glass that can be tempered to provide maximum 
mechanical strength. The exterior of this pane, called a pressure 
pane, is coated with a red reflector coating to reflect the infrared 
(heat portion) rays while transmitting the visible spectrum. 

The center pane is constructed of low expansion fused silica 
glass due to its high optical quality and excellent thermal shock 
resistance. This pane is 33 millimeters (1.3 inches) thick. The 
exterior and interior are coated with a high efficiency, anti- 
reflection coating to improve visible light transmission. This pane 
is redundant to the pressure pane. These windows withstand a 
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proof pressure of 445,050 mm Hg (8600 psi) at 115°C (240°F) 
and 0.017 relative humidity. This pane is also a redundant pane 
to the outer thermal pane. 


The outer pane’s exterior is of the same material as the 
center pane and is 15.7 millimeters (5/8 of an inch) thick. The 
exterior is uncoated, but the interior is coated with the high 
efficiency anti-reflective coating. The outer surface withstands 
approximately 482°C (900°F) and the interior surface with¬ 
stands approximately 426°C (800°F). 

Each of the forward six windows’ outer panes measures 
1066.8 millimeters (42 inches) diagonally, and the center and 
inner panes each measure 889 millimeters (35 inches) diagon¬ 
ally. The outer panes of the forward six windows are mounted 
and attached to the forward fuselage. The center and inner panes 
are mounted and attached to the crew compartment. Redundant 
seals are employed for each window. No sealing/bonding com¬ 
pounds are used. 

The two overhead windows at the flight deck aft station are 
identical in construction to the six forward windows except for 
thickness. The inner and center panes are 11.4 millimeters (0.45 
of an inch) thick, and the outer pane is 17.2 millimeters (0.68 of 
an inch) thick. The outer pane is attached and mounted to the 
forward fuselage, and the center and inner panes are mounted 
and attached to the crew compartment. The two overhead 
window’s clear view area is 508 by 508 millimeters (20 by 20 
inches). In the operational configuration, the left-hand overhead 
window will provide the crew members with an emergency exit. 
The inner and center panes will open into the crew cabin, and the 
outer pane will open up and over the top of the orbiter. This 
provides an emergency exit area of 508 by 508 millimeters (20 
by 20 inches). 

On the aft flight deck, each of the two windows for viewing 
the payload bay consists of only two panes of glass identical to 
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the six forward windows’ inner and center pane. The outer 
thermal pane is not installed. Each pane is 7.6 millimeters (0.30 
of an inch) thick. The windows are 370 by 279 millimeters 
(14-1/2 by 11 inches). Both panes are attached and mounted to 
the crew compartment. 

The side hatch viewing window consists of three panes of 
glass identical to the six forward windows. The inner pane is 
289.5 millimeters (11.4 inches) in diameter and 6.35 millimeters 
(1/4 of an inch) thick. The center pane is 289.5 millimeters (11.4 
inches) in diameter and 12.7 millimeters (1/2 inch) thick. The 
outer pane is 381 millimeters (15 inches) in diameter and 7.62 
millimeters (3/10 of an inch) thick. 

Each window has shade/filter covers to reduce the light 
entering the cabin. The shade/filters are stowed until required. 
Attachment mechanisms and devices are provided for the 
installation at each window on the flight deck and the mid deck 
side hatch window. 

Contractor for the windows is Corning Glass Co., Corning, 

NY. 

WING 

The wing is an aerodynamic lifting surface that provides 
conventional lift and control for the orbiter. The left and right 
wings consist of the wing glove, the intermediate section which 
includes the main landing gear well, the torque box, the forward 
spar for the mounting of the reusable reinforced carbon-carbon 
leading edge structure thermal protection system, the wing/ 
elevon interface, the elevon seal panels, and the elevons. 

The wing is constructed of conventional aluminum alloy 
with a multi-rib and spar arrangement with skin-stringer-stiffened 
covers or honeycomb skin covers. Each wing is approximately 
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18.28 meters (60 feet) long at the fuselage intersection, with a 
maximum thickness of 1.52 meters (5 feet). 

The forward wing box is an extension of the basic wing that 
aerodynamically blends the wing leading edge into the mid 
fuselage wing glove. The forward wing box is of a conventional 
design of aluminum multi-ribs, aluminum tubes, and tubular 
struts. The upper and lower wing skin panels are stiffened 
aluminum. The leading edge spar is of aluminum honeycomb 
panel construction. 

The intermediate wing section consists of the conventional 
aluminum multi-ribs and aluminum tubes. The upper and low# 
skin covers are of aluminum honeycomb. A portion of the lower 
wing surface skin panel is made up of the main landing gear door. 
The intermediate section houses the main landing gear compart¬ 
ment and reacts a portion of the main landing gear loads. A 
structural rib supports the outboard main landing gear door 
hinges and the main landing gear trunnion and drag link. The 
support for the inboard main landing gear trunnion and drag link 
attachment is provided by the mid fuselage. The main landing 
gear door is a conventional aluminum multi-rib and spar 
configuration. 

The four major spars are of corrugated aluminum to mini¬ 
mize thermal loads. The forward closeout beam is of aluminum 
honeycomb and provides the attachment of the thermal protec¬ 
tion system reusable reinforced carbon-carbon leading edge 
structure. The rear spar provides the attachment interfaces for 
the elevons. hinged upper seal panels, and associated hydraulic 
and electrical system components. The upper and lower wing 
skin panels are of aluminum stiffened skins. 

The elevons provide orbiter flight control during atmos¬ 
pheric flight. The two-piece elevons are of conventional alumi¬ 
num multi-rib and beam construction with aluminum honey- 
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comb skins for compatibility with the acoustic environment and 
thermal interaction. The elevons are divided into two segments 
for each wing and each segment is supported by three hinges. 
Attachment to the flight control system hydraulic actuators is 
along the forward extremity of each elevon, and all hinge 
moments are reacted at these points. Each elevon travels 40 
degrees up and 25 degrees down. 

The transition area on the upper surface between the 
torque box and the movable elevon consists of a series of hinged 
panels, which provide a closeout of the wing-to-elevon cavity. 
These panels are of Inconel honeycomb sandwich construction 
outboard of wing station Y w 312.5 and of titanium honeycomb 
sandwich construction inboard of wing station Y w 312.5. The 
upper leading edge of each elevon incorporates titanium rub 
strips. The rub strips are of titanium honeycomb construction 
and are not covered with the thermal protection system reusable 
surface insulation. The rub strips provide the sealing surface area 
for the elevon seal panels. 

The exposed areas of the wings, main landing gear doors, 
and elevons are covered with the thermal protection system 
reusable surface insulation materials except for the elevon seal 
panels. 

Thermal seals are provided on the elevon lower cove area 
along with thermal spring seals on the upper rub panels. Pressure 
seals and thermal barriers are provided on the main landing gear 
doors. 

The wing is attached to the fuselage with a tension bolt 
splice along the upper surface. A shear splice along the lower 
surface in the area of the fuselage carry-through completes 
attachment interface. 

The wing and main landing gear door contractor is 
Grumman Corp.. Bethpage. NY. 
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MID FUSELAGE 

The mid fuselage structure interfaces with the forward 
fuselage, aft fuselage, and wings. It supports the payload bay 
doors, hinges, tiedown fittings, forward wing glove, and various 
orbiter system components, in addition to forming the payload 
bay area. 

The forward and aft ends of the mid fuselage are open, with 
reinforced skin and longerons interfacing with the bulkheads of 
the forward and aft fuselage. The mid fuselage is primarily an 
aluminum structure 18.28 meters (60 feet) long, 5.18 meters (17 
feet) wide, and 3.96 meters (13 feet) high. It weighs approxi¬ 
mately 6,124 kilograms (13,502 pounds). 

The mid fuselage skins are integrally machined by numerical 
control. The panels above the wing glove and the wings for the 
forward eight bays have longitudinal T stringers. The aft five bays 
have aluminum honeycomb panels. The side skins in the shadow 
of the wing are also numerically control machined but have 
vertical stiffeners. 

There are 12 main frame assemblies that stabilize the mid 
fuselage structure. The assemblies consist of vertical side ele¬ 
ments and horizontal elements. The side elements are machined, 
whereas the horizontal elements are boron/aluminum tubes with 
bonded titanium end fittings, which substantially reduce weight. 
This reduced the weight by 49 percent. This is a reduction of 
approximately 138 kilograms (305 pounds). 

In the upper portion of the mid fuselage are the sill and 
door longerons. The machined sill longerons not only are the 
primary body bending elements, but also take the longitudinal 
loads from payloads in the payload bay. Attached to the pay- 
load bay door longerons and associated structure are the 13 pay- 
load bay door hinges. These hinges provide the vertical reaction 
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Mid Fuselage 

from the payload bay doors and five of the hinges react the pay- 
load bay door shears. The sill longeron also provides in the 
operational configuration the base support for the payload bay 
manipulator arm or arms and its storage provisions, the Ku-band 
rendezvous antenna and antenna base support and its storage 
provisions, and the payload bar door actuation system. 

The side wall forward of the wing carry-through structure 
provides the inboard support for the main landing gear. The total 
lateral landing gear loads are reacted by the mid fuselage 
structure. 

The mid fuselage also supports the two electrical wire trays 
that contain the wiring between the crew compartment and aft 
fuselage. 
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Plumbing and wiring in the lower portion of the mid 
fuselage are supported by fiberglass milk stools. 

The remainder of the exposed areas of the mid-fuselage is 
covered with the thermal protection system reusable surface 
insulation. 

Contractor for the mid fuselage is General Dynamics Corp., 
Convair Aerospace Division, San Diego, CA. 

PAYLOAD BAY DOORS 

The payload bay doors consist of left- and right-hand doors 
hinged at each side of the mid fuselage and latched mechanically 
at the forward and aft fuselage and at the split top centerline. 

Each door hinges on 13 Inconel 718 external hinges (five 
shear and eight idlers). The lower half of each hinge attaches to 
the mid fuselage sill longeron. The hinges rotate on bearings with 
dual rotational surfaces. 

Each door actuation system provides the mechanism to 
drive each door side to the open or closed position. Each 
mechanism consists of an electromechanical power drive unit and 
six rotary gear actuators. The actuators are connected by torque 
tubes to each other, and to the power drive unit. Linkages trans¬ 
mit torque from the rotary actuators to the doors. 

The forward 9.14-meter (30-foot) sections of the left- and 
right-hand doors incorporate deployable radiators that are hinged 
and latched to the door inner surface which rejects the excess 
heat of the Freon-21 coolant loops from both sides of the radia¬ 
tor panels when the doors are open. An electromechanical 
actuation system on the door unlatches and deploys the radiators 
when open and latches and stows the radiators when closed. 
Fixed radiator panels are installed on the forward end of the aft 


payload bay doors and radiate from one side only. Kitted, fixed 
radiator panels may be installed on the aft end of the aft payload 
bay doors when required by a specific mission and also radiate 
from only one side. 

During payload bay door closure, the crew optical align¬ 
ment sight (COAS) is used at the aft flight deck station to check 
door alignment. 

When closed, the doors arc latched to the forward and aft 
bulkheads and along the upper centerline of the doors. The 
latching system consists of 16 bulkhead latches (eight aft and 
eight forward) and 16 payload bay door centerline latches. The 
forward and aft bulkhead latches are in groups of four ganged 
latch hooks. The centerline latches are also in groups of four 
ganged latches. Each gang incorporates four latches, bellcranks, 
pushrods, levers, rollers, and an electromechanical actuator. 

The actuators, actuator output arm and active latch 
mechanisms are mounted on the forward and aft doors. Passive 
latch rollers, one for each payload bay door latch hook, are 
mounted on the forward and aft bulkheads. The four hooks in 
each latch group are lined by a mechanism operated by the 
actuator output arm. During unlatching the actuator drives 
the output arm, which disengages all four latch hooks from the 
passive rollers on the bulkhead. The process is reversed when 
the doors close. 

When the payload bay doors are closed, they are fixed at 
the aft fuselage bulkhead and allowed to move longitudinally at 
the forward fuselage. The doors also accommodate vehicle 
torsional loads (a force which causes a body such as a shaft to 
twist about its longitudinal axis), aerodynamic pressure loads, 
and payload bay vent lag pressures. The payload bay is not a 
pressurized area. 












Space Shuttle Spacecraft Structures 


X 0 1306.4 


Hinge 

Line 


X 0 574 


I M Hinge - 

Shear Hinges Ar Line 

Fixed 

Latches (8) 



Forward Radiator 

Shear 

Hinges 

Hinge Fittings 
(6 per Side) 

__ rinIL 

Torque Box' 

1 ® 

Floating Latches (8) 
Door to Forward 
Bulkhead 

A 


Radiator 
Shear Fittings 
per Side) 


Aft Radiator 
Attach Fittings 
(33 per Side) 

Latch Attachment 
(4 per Panel) 


Closeout Beam 


Closeout Frames 


* Radiator 
Latch Fittings 
(12 per Side) 

'RadiatorTorque Expansion Joint Shear Pin 
Tube Fittings (5 per Side - Typical 
(4 per Side) 4 Places > 


Shear Fitting 

Attachment 

(1 per Panel - Passive) 


172 


Payload Bay Doors 















Space Shuttle Spacecraft Structures 



Payload Bay Doors 
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Payload Bay Door Latch (Typical) 

Radiator Deploy and Latch (Typical) 
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Payload Bay Doors and Radiators Mechanisms 

Thermal and pressure seals are used to close the gaps at the 
forward and aft fuselage interface, door centerline, and circum¬ 
ferential expansion joints. 

The doors are 18.28 meters (60 feet) long. Each consists of 
five segments interconnected by expansion joints. The chord of 
each half of these curved doors is approximately 3.04 meters (10 
feet) and the doors are 4.57 meters (15 feet) in diameter. The 
surface area is approximately 148.64 meters squared (1600 
square feet). 

The doors are constructed of graphite/epoxy composite 
material, which reduces the weight by 23 percent over that of 
aluminum honeycomb sandwich. This is a reduction of approxi¬ 
mately 408 kilograms (900 pounds), which brings the weight of 
the doors down to approximately 1480 kilograms (3264 
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pounds). The payload bay doors are the largest aerospace 
structure to be constructed from composite material. 

The composite doors will withstand 163 dB acoustic noise 
and a temperature range of minus 112° to plus 57°C (minus 
170° to plus 135°F). 

The doors are made up of subassemblies consisting of 
graphite/epoxy honeycomb sandwich panel, solid graphite/epoxy 
laminate frames, expansion joint frames, torque box, seal 
depressor, centerline beam intercostals, gussets, end Fittings, 
and clips. There are also aluminum 2024 shear pins, titanium 
fittings and Inconel 718 floating and shear hinges. The assembly 
is joined by mechanical fasteners. Lightning strike protection is 
provided by bonding aluminum mesh wire to the outer skin. 

Extra-vehicular activity handholds are attached in the 
torque box areas. 

The payload bay doors are covered with the reusable surface 
insulation. 

The port (left-hand) door with attached systems weighs 
approximately 1,077 kilograms (2,375 pounds) and the starboard 
weighs about 1,149 kilograms (2,535 pounds). The starboard 
door contains the centerline latch active mechanisms, which 
accounts for the weight difference. These weights do not include 
the radiator panel system, which adds 377 kilograms (833 pounds) 
per door. 

The payload bay door power and control system consists of 
the data processing system (DPS), midmotor control assemblies 
(MMCA) and electro-mechanical actuator assembly electrical 
motors. Auto or manual commands from the DPS are sent to the 
MMCA’s, which activate the proper actuator motors to open or 
close latches and doors. Microswitch feedback signals are sent to 


the DPS to indicate the status of the payload bay door (PBD) 
latch and drive system on the CRT display and to operate the 
PBD status indicator on the aft flight deck crew display and 
control panel. The status of the payload bay door limit switches 
is also displayed on the CRT. 

The forward and aft bulkhead latches are in groups of four 
ganged latch hooks. Each group of hooks is opened or closed by 
an electro-mechanical actuator consisting of two redundant 
three phase ac reversible electric motors operated by the 
OPEN/CLOSE/STOP switch on Panel R13. 


1 2 3 4 5 
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Payload Bay Doors Deployment and Closure System 
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During latching, bulkhead switch module striker arms come 
into contact with the doors when they are nearly closed. The 
ready-to-latch switches activate bulkhead latch electrical motors. 
When the payload bay doors are fully closed, switches on the 
forward and aft bulkheads turn off the payload bay door elec¬ 
trical drive motors. 


The payload bay door bulkhead latch groups can be opened 
and closed automatically in a predetermined sequence or 
manually by individual latch groups through the computer 



Payload Bay Doors Ready to Latch Switch Module 


keyboard. In the automatic mode, the forward and aft bulkhead 
latches operate simultaneously. 


A PL (payload) BAY DOORS indicator on Panel R13 will 
show whether the payload bay doors are closed or open only 
when they are operated automatically. The indicator will remain 
in its original state when the manual mode is used. 


The payload bay door drive motors are automatically 
turned off if closing takes more than two times the normal 
63 seconds. This prevents damage to the payload bay door drive 
system if a switch fails. A two-out-of-three voting logic of the 
ready-to-latch switches precludes premature start signals to the 
bulkhead latch drive motors. 
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Payload Bay Doors Bulkhead Latches Mechanical Block Diagram 
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Note: Numbered Blocks Represent MMCA's. 

Each MMCA Release Limit Switch Contact 
Must Be Closed for Auto-Sequence to 
Continue. 

Payload Bay Doors Auto-Open Signal Flow Simplified 

The bulkhead latch drive motors are turned off auto¬ 
matically only if the operating time is more than twice the 
normal 30 seconds. If only one bulkhead electrical drive motor 
operates, 60 seconds are required to open or close the bulkhead 
latches. Each MMCA receives commands from the DPS and is 
turned on by limit switch closure. Each has its own timer set to 
twice the normal operating time. This allows enough time for 
single motor operation of a bulkhead latch group without causing 
a sequence fail signal PLB (payload bay) DOORS CRT message 
and SM ALERT. 

All limit switch contact closures are sent to the DPS and are 
shown on the PBD (payload bay) CRT display under 
MICRO-SW (switch) STAT (status). The flight crew can observe 
the change in the status of these switches. Microswitch status is 
also transmitted to telemetry. 

Torque limiters in the bulkhead latch groups allow slippage 
if a limit switch fails to turn off an electrical drive motor or a 


mechanism jams during latch operations, thus preventing damage 
to the motors or mechanisms. 


Extravehicular activity (EVA) disconnect points in the 
bulkhead latch group mechanisms are provided in case the 
mechanism jams when the doors close. This permits crew mem¬ 
bers to close the doors manually from inside the payload bay. 


The starboard payload bay doors must be opened first and 
closed last because of the arrangement of the centerline latch 
mechanism and the structural and seal overlap. 


During centerline latching, the electrical drive motors turn 
the rotary shaft, bellcrank, and link, causing the hook to engage 
the passive roller. Alignment rollers on the starboard doors elimi¬ 
nate overlapping of the closed doors caused by thermal distortion. 
All 16 centerline hook assemblies contain the alignment rollers. 
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Payload Bay Door Upper Centerline Latch System 
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Payload Bay Doors Centerline Latches Mechanical Block Diagram 



The passive shear fittings in each centerline latch group align the 
closing doors and cause the fore and aft shear loads to react once 
the doors are closed. 

The centerline latch groups can be opened and closed 
automatically in a predetermined sequence manually or by single 
individual latch groups through the computer keyboard. 

The centerline latch drive motors are turned off auto¬ 
matically if they operate more than twice the normal 20 seconds. 
If only one motor operates, it takes 40 seconds to open or close 
the centerline latches. Each MMCA receives commands from the 
DPS and is turned on by limit switch closure; each has its own 
timer set to twice the normal operating time. This allows enough 
time for single-motor operation of a centerline latch group with¬ 
out causing a sequence fail signal and computer alert. 

Torque limiters in the centerline latch groups allow slippage 
if limit switches fail to turn off an electrical drive motor or the 
mechanisms jam. 

EVA disconnects in a centerline latch group can be used to 
isolate a jammed latch from the group. 

The payload bay doors are driven by a rotary actuator 
consisting of two electrical three-phase reversible ac motors per 
power drive unit (PDU). There is one PDU for the starboard 
doors and one for the port doors. 

The PDU drives a 16-meter (55-foot) long torque shaft. The 
shaft turns the rotary actuators, which causes the push rod, 
bellcrank, and link to push the doors open. The same arrangement 
pulls the doors closed. Limit switches on each drive system turn 
off drive motors when the doors are open. 

The payload bay door drive motors are turned off auto¬ 
matically if both motors run more than two times the normal 
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(Dual Rotating Surfaces) 
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63 seconds. It takes 126 seconds for just one motor to open or 
close the doors. Each MMCA times is set to twice the normal 
operating time, which allows enough time for single-motor 
operation of the payload bay door. 

Torque limiters are incorporated in the rotary actuators to 
avoid damaging the drive motors or mechanisms if limit switches 
fail to turn off an electrical drive motor or the mechanisms jam. 

Two bolts on the bellcrank and the bolt connecting the link 
to the rotary actuator can be EVA disconnect points if the 
linkage fails when the doors close. The PDU’s can be disengaged 
manually on the ground or on orbit. 

The payload bay doors open through an angle of 175.5 
degrees. 
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Two radiator panels on each forward payload bay door will 
be deployed when the doors are opened on orbit and stowed 
when the doors are closed before entry. Freon-21 Coolant Loop 
No. 1 Hows through the left hand radiator panels and the No. 2 
loop Hows through the right-hand panels. On orbit the panels 
radiate excess heat collected by the Freon-21 coolant loops from 
heat exchangers and cold plates throughout the orbiter. Coolant 
flows through the radiators from aft to forward. The radiator 
panels mounted on the forward end of the aft payload bay doors 
are fixed to the bay doors. 

The radiator deploy and stow operation is controlled 
manually from the aft night deck crew display and control panel. 
The PL BAY MECH (payload bay mechanisms) PWR switches 
and the RADIATOR LATCH and RADIATOR CONTROL SYS 
switches control the panels. Four indicators show the radiator 
latch and deploy status. 

When the payload bay doors are fully open, the SYS1 and 
SYS2 PL BAY MECH PWR switches are turned to ON and the 
RADIATOR LATCH CONTROL switches to RELEASE. In 
approximately 26 seconds, the status indicators will show REL 
(release). The RADIATOR CONTROL SYS A and SYS B switches 
are turned to DEPLOY, and in approximately 43 seconds, the 
indicators will show DEP (deploy). The stow sequence is 
reversed. The electrical power and control system for the deploy¬ 
able radiators is designed to permit the loss of one latch or 
radiator control switch or one PL BAY MECH PWR SYS1 or 
SYS2 switch and not affect the operation of the radiators. 

Each deployable radiator panel is secured to the payload 
bay door in the stowed position by six ganged latches. Two 
electrical drive motors latch or unlatch the six latches in each 
panel simultaneously. The motors can be reversed by the LATCH 
and UNLATCH switches on Panel R13. Limit switches turn off 
the motors when the latches are opened or closed. Each electrical 


drive motor is controlled by a separate set of switches. A differ¬ 
ential within the PDU allows dual- or single-motor operation. 
Latching or unlatching the radiators takes approximately 26 
seconds with both motors operating or 52 seconds with one 
motor. 


The electric drive motors rotate torque shafts, and the 
shafts turn the rotary actuators, which operate push rods that 
latch or unlatch the hooks. The linkages and latches are attached 
to the payload bay doors and passive rollers are attached to the 
radiator panels. Torque limiters in the PDU prevent damage to 
the system in the event of jamming or binding during system 
operation. 


Deploy systems on the port and starboard sides drive the 
radiators away from the payload bar doors and retract them. 


Each deploy system uses two reversible electric motors to 
operate the power drive unit (PDU). The motors are not turned 
on until the MMCA’s have received two signals from the radiator 
panel latch drives. This prevents inadvertent deployment of the 
radiators while still latched. As the rotary actuator shaft turns, 
the deployment crank and link straighten out and push the 
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Deployable Radiator Latch System Block Diagram 
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radiator panels away from the payload bay door to the deployed 
position. Stowing the radiators is the reverse operation. Limit 
switches turn off the electric drive motors when the radiators are 
deployed or stowed. Both port and starboard radiators are 
deployed or stowed simultaneously. The radiators deploy 35.5 
degrees from the payload bay doors in 43 seconds with both 
electrical motors operating or in 86 seconds with one electrical 
motor operating. The DEPLOY/STOW switches on Panel R13 
allow single- or dual-motor operation. 

Torque limiters in the PDU prevent damage in the event of 
jamming or binding during operation. 

Each rotary crank can be disengaged from the rotary 
actuator (via EVA operations) by retracting a shear pin. Retrac¬ 
tion allows the crank to rotate about an alternate pivot and 
permits the crew to stow the panels if the system fails. If the 
PDU fails, all four shear pins must be removed to allow manual 
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stowing of the radiators. The pins are accessible when the 
radiators are fully deployed. No disengagement is planned if the 
radiators fail to deploy. 

Contractors are Rockwell’s Tulsa Division, Tulsa, OK (pay- 
load bay doors); Curtiss Wright, Caldwell, NJ (payload bay door 
power drive unit, rotary actuators, drive shafts, torque tubes 
and couplings, radiator deploy/latch actuator and latch 
mechanism); Hoover Electric, Los Angeles, CA (payload bay 
door electromechanical rotary actuators); Vought Corp., 
Dallas, TX (radiators); Rockwell’s Space Transportation and 
Systems Group, Shuttle Orbiter Division, Downey, CA (latches 
and linkages). 

AFT FUSELAGE 

The aft fuselage consists of an outer shell, thrust structure, 
and internal secondary structure. It is approximately 5.48 meters 
(18 feet) long, 6.70 meters (22 feet) wide, and 6.09 meters (20 
feet high). 

The aft fuselage supports and interfaces with the left-hand 
and right-hand aft OMS/RCS pods, the wing aft spar, mid 
fuselage, orbiter/external tank rear attachments, Space Shuttle 
main engines, heat shield, body flap, vertical tail, and two T-0 
launch umbilical panels. 

The aft fuselage provides the load path to the mid fuselage 
main longerons, main wing spar continuity across the forward 
bulkhead of the aft fuselage, structural support for the body flap, 
structural housing around all internal systems for protection 
from operational environments (pressure, thermal, and acoustic), 
and for controlled internal pressures during flight. 

The forward bulkhead closes off the aft fuselage from the 
mid fuselage and is composed of machined and beaded sheet 


OMS/RCS Pod 



Aft Fuselage Structure 


metal aluminum segments. The upper portion of the bulkhead 
attaches to the front spar of the vertical tail. 

The internal thrust structure supports the three main 
engines. The upper section of the thrust structure supports the 
upper main engine, and the lower section of the thrust structure 
supports the two lower main engines. The internal thrust 
structure includes the main engines, load reaction truss struc¬ 
tures, engine interface fittings, and the actuator support structure 
and supports the main engines, low pressure turbopumps, and 
propellant lines. The orbiter/external tank two aft attach points 
interface at the longeron fittings. 
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Aft and Mid Fuselage 

The internal thrust structure is composed mainly of 28 
machined, diffusion-bonded truss members. In diffusion bonding, 
titanium strips are bonded together under heat, pressure, and 
time. This fuses the titanium strips into a single, hollow 
homogenous mass that is lighter and stronger than a forged part. 
In looking at the cross section of a diffusion bond, one sees no 
weld line. It is an homogenous parent metal, yet composed of 
pieces joined by diffusion bonding. In selected areas, the 
titanium construction is reinforced with boron/epoxy tubular 



Aft Fuselage 

struts to minimize weight and add stiffness. This reduced the 
weight by 21 percent. This is a reduction of approximately 408 
kilograms (900 pounds). 

The upper thrust structure of the aft fuselage is of integral 
machined aluminum construction with aluminum frames, except 
for the vertical fin support frame, which is titanium. The skin 
panels are integrally machined aluminum and attach to each side 
of the vertical fin to react drag and torsion loading. 

The outer shell of the aft fuselage is constructed of integral 
machined aluminum. Various penetrations are provided in the 
shell for access to installed systems. 
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• Diffusion Bonded Titanium 

• Boron-Epoxy-Reinforced 
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Attachment 

Interface 


Aft Fuselage Internal Structure 

The secondary structure of the aft fuselage is of conven¬ 
tional aluminum construction, except that some titanium and 
fiberglass is used for thermal isolation of equipment. The aft 
fuselage secondary structures consists of brackets, build-up webs, 
truss members, and machined fittings as required by system 
loading and support constraints. Certain system components, 
such as the avionics shelves, are shock-mounted to the secondary 
structure. The secondary structure includes support provisions 
for the auxiliary power units, hydraulics, ammonia boiler, flash 
evaporator, and electrical wire runs. 

The two external tank umbilical areas interface with the 
external tank two aft attach points of the orbiter and the 


external tank liquid oxygen, liquid hydrogen feed lines, as well as 
electrical wire runs. The umbilicals are retracted, and the 
umbilical areas are closed off after external tank separation by an 
electromechanically operated beryllium door at each umbilical. 
Thermal barriers are employed at each umbilical door. The 
exposed area of each door when closed is covered with reusable 
surface insulation. 

The aft fuselage heat shield and seal provides a closeout of 
the orbiter aft base area. The aft heat shield consists of a base 
heat shield of machined aluminum. Attached to the base heat 
shield are domes of honeycomb construction which support 
flexible and sliding seal assemblies. The engine-mounted heat 
shield is of Inconel honeycomb construction and is removable for 
access to the main engine power heads. The heat shield is covered 
with reusable surface insulation except for the Inconel segments. 
The exposed areas of the aft fuselage also are covered with 
reusable surface insulation. 

The OMS/RCS left- and right-hand pods are attached to the 
upper aft fuselage left and right sides. Each pod is fabricated 
primarily of graphite/epoxy composite and aluminum. Each pod 
is 6.45 meters (21.8 feet) long and 3.46 meters (11.37 feet) wide 
at its aft end and 2.56 meters (8.41 feet) wide at its forward end, 
with a surface area of approximately 40.41 meters squared 
(435 square feet). Each pod is divided into two compartments: 
the OMS and the RCS housing. Each pod houses all the OMS 
propulsion components and RCS propulsion components. Each 
pod is attached to the aft fuselage with 11 bolts. The pod skin 
panels are graphite/epoxy honeycomb sandwich. The forward 
and aft bulkhead, aft tank support bulkhead, and floor truss 
beam are machined aluminum 2124. The centerline beam is 
2024 aluminum sheet with titanium stiffness and graphite/epoxy 
frames. The frames are graphite/epoxy. The OMS thrust structure 
is conventional 2124 aluminum construction. The cross braces 
are aluminum tubing, and the attach fittings at the forward and 
aft fittings are 2124 aluminum. The intermediate fittings are 
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Aft Fuselage Avionics Provisions 
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Aft Avionics Bays 

corrosion-resistant steel. The RCS housing, which attaches to the 
OMS pod structure, contains the RCS thrusters and associated 
propellant feed lines. The RCS housing is of aluminum sheet 
metal construction, including flat outer skins, and the curved 
outer skin panels are graphite/epoxy honeycomb sandwich. 
Access to the OMS and RCS and attach points are provided by 
24 doors in the skins. 

The two graphite/epoxy pods per spacecraft reduces the 
weight by 10 percent. This is a reduction of approximately 204 
kilograms (450 pounds). The pods will withstand 162 dB 
acoustic noise and a temperature range from minus 112°C to 
plus 57°C (minus 170° to plus 135°F). 
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Aft OMS/RCS Pod 

The exposed areas of the OMS/RCS pods are covered with 
reusable surface insulation and a pressure and thermal seal is 
installed at the OMS/RCS pod aft fuselage interface. Thermal 
barriers also are installed and they interface with the RCS 
thrusters and reusable surface insulation. 

The body flap thermally shields the three main engines 
during entry and provides the orbiter with pitch control trim 
during its atmospheric flight after entry. 
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The body flap is an aluminum structure consisting of ribs, 
spars, skin panels, and a trailing edge assembly. The main upper 
and lower forward honeycomb skin panels are joined to the ribs, 
spars, and honeycomb trailing edge with structural fasteners. The 
removable upper forward honeycomb skin panels complete the 
body flap structure. 

The upper skin panels aft of the forward spar and the entire 
lower skin panels are mechanically attached to the ribs. The 
forward upper skin consists of five removable access panels 
attached to the ribs with quick-release fasteners. The four 
integral machined aluminum actuator ribs provide the aft 
fuselage interface through self-aligning bearings. Two bearings are 
located in each rib for attachment to the four rotary actuators 
located in the aft fuselage, which are controlled by the flight 
control system and the hydraulically actuated rotary actuators. 
The remaining ribs consist of eight stability ribs and two closeout 
ribs constructed of chemically milled aluminum webs bonded to 
aluminum honeycomb core. The forward spar web is of 
chemically milled sheets with flanged holes and stiffened beads. 
The spar web is riveted to the ribs. The trailing edge includes the 
rear spar, which is composed of piano-hinge half-cap angles, 
chemically milled skins, honeycomb aluminum core, closeouts, 
and plates. The trailing edge attaches to the upper and lower 
forward panels by the piano-hinge halves and hinge pins. Two 
moisture drain lines and one hydraulic fluid drain line penetrate 
the trailing edge honeycomb core for horizontal and vertical 
drainage. 

The body flap is covered with reusable surface insulation 
and an articulating pressure and thermal seal to its forward cover 
area on the lower surface of the body flap to block heat and air 
flow from the structures. 

The aft fuselage also is built by Rockwell’s Space Transpor¬ 
tation and Systems Group, Shuttle Orbiter Division, Downey,CA. 



The OMS/RCS pods are built by McDonnell Douglas, St. Louis, 
MO. The body flap is built by Rockwell’s Columbus, Ohio, 
division. 

VERTICAL TAIL 

The vertical tail consists of a structural fin surface, the 
rudder/speed brake surface, a tip, and a lower trading edge. The 
rudder splits into two halves to serve as a speed brake. 

The vertical tail structure fin is made of aluminum. Integral 
machined skins and strings, ribs, and two machined spars make 


Vertical Tail 
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1.27 m 



Vertical Tail 
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RUDDER DEFLECTION 




Aero surface Deflections 
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up the main torque box. The fin is attached by two tension tie 
bolts at the root of the front spar of the vertical tail to the 
forward bulkhead of the aft fuselage and by eight shear bolts at 
the root of the vertical tail rear spar to the upper structural 
surface of the aft fuselage. 

The rudder/speed brake control surface is made of conven¬ 
tional aluminum ribs and spars with aluminum honeycomb skin 
panels and is attached through rotating hinge parts to the vertical 
tail fin. 

The lower trailing edge area of the fin houses the rudder/ 
speed brake power drive unit and is made of aluminum honey¬ 
comb skin. 

The hydraulic power drive unit/mechanical rotary actuation 
system drives left- and right-hand drive shafts in the same direc¬ 
tion for rudder control of plus or minus 27 degrees. For speed 
brake control, the drive shafts turn in opposite directions for a 
maximum of 49.3 degrees each. The rotary drive actions are 
also combined for joint rudder/speed brake control. The hydrau¬ 


lic power drive unit is controlled by the orbiter flight control 
system. A maximum deflection rate of 10 degrees per second 
control capability is available. 

The vertical tail structure is designed for 163 dB acoustic 
environment with a maximum temperature of 176°C (350°F). 

An Inconel honeycomb conical seal houses the rotary 
actuators and provides a pressure and thermal seal which with¬ 
stands a maximum of 648°C (1200°F). 

The split halves of the rudder panels and trailing edge con¬ 
tain a thermal barrier seal. 

The vertical tail and rudder/speedbrake are covered with 
reusable surface insulation materials. A thermal barrier is also 
employed at the interface of the vertical stabilizer and aft 
fuselage. 

The contractor for the vertical tail and rudder/speedbrake is 
Fairchild Republic, Farmingdale, NY. 


PASSIVE THERMAL CONTROL SYSTEM 


A passive thermal control system helps maintain the orbiter 
systems and components within their temperature limits. This 
system uses orbiter heat sources and heat sinks and is supple¬ 
mented by insulation blankets, thermal coatings, and thermal 
isolation methods. Heaters are provided on components and 
systems where passive thermal control techniques are not 
adequate. (The heaters are described in the various systems.) 

The insulation blankets are of two basic types: fibrous bulk 
and multilayer. The bulk blankets are fibrous material with a 


density of 0.9 kilogram (2 pounds per cubic foot) with a sewn 
cover of reinforced double-goldized Kapton. The cover material 
has 145,317 holes per meters squared (13,500 holes per square 
foot) tor venting. Goldized tape is used for cutouts, patching, 
and reinforcements. Tufts are used throughout the blankets to 
minimize billowing during venting. 


The multilayer blankets are constructed of alternate layers 
of perforated double-goldized Kapton reflectors and Dacron net 
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separators for a total of 16 reflector layers, with the two cover 
halves counting as two layers. Covers, tufting, and goldized tape 
are similar to the bulk blankets. 
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The contractors are Hi-Temp Insulation, Inc., Camarillo, CA 
(fibrous insulation); Scheldahl, Northfield, MN (cover materials 
and inner layers); Apex Mills, Los Angeles, CA (separators). 
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The purge, vent, and drain systems accomplish the follow¬ 
ing: provide the unpressurized compartments of the orbiter 
with an air purge that thermally conditions system components 
and prevents hazardous gas accumulation, vent compartments 
during ascent and take in air during descent to minimize differen¬ 
tial pressures, and drain trapped fluids and condition the window 
cavities to maintain visibility. 

The purge system carries conditioned gas from ground 
support equipment to the orbiter cavities via the T-0 umbilical 
disconnect during preflight and postflight phases. Purge gas is 
provided to three separate sets of distribution plumbing: (1) the 
forward fuselage, OMS/RCS pods, wings, and vertical stabilizer, 
(2) mid fuselage, and (3) the aft fuselage. 
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The vent system provides the flow area for control of 
pressure during purge, depressurization during ascent, molecular 
venting in orbit, and repressurization during descent. There are 
18 vent ports in the fuselage skin that serve specific orbiter 
cavities. The purge and vent outlets are located and sized to vent 
the cavities within structural, hazard, and purge limitations. Vent 
doors are operated by electromechanical actuators and are 
sequenced during the mission to protect against gas ingestion, 
high acoustic levels, and entry heating. 

The drain system provides flow paths and systems to drain 
or remove accumulated water. The paths are provided through a 
series of limber holes that allow drainage to the lowest point for 
removal. Locations that cannot be served by limber holes are 



Distribution Plumbing: 

© Forward Fuselage, OMS/RCS Pods, 
Wings, Vertical Stabilizer 
Q) Mid Fuselage 
(3) Aft Fuselage 






Purge Gas System 


evacuated through a series of tubes and disconnects by ground 
support equipment. 

The purge and vent ducting is Kevlar/epoxy (115 pieces up 
to 279.4 millimeters [ 11 inches] in diameter) which replaced 
fiberglass or aluminum ducts. This reduced the weight by 
33 percent. This is a reduction of approximately 90 kilograms 
(200 pounds). 
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The window cavity conditioning system prevents moisture 
ingress into the windshields and overhead window and payload 
viewing window cavities and provides for depressurization and 
repressurization of these cavities during flight. This system also 
provides the purge conditioning (drying) of these areas during 
ground operations. The side hatch window is self-contained. 

The hazardous gas detection system detects hazardous levels 
of explosive or toxic gases. The onboard orbiter sample lines duct 
the compartment gases to the ground support equipment at the 
T-0 right-hand umbilical panel and to the ground-based mass 
spectrometer for analysis at the launch pad. 
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THERMAL PROTECTION SYSTEM 



The thermal protection system (TPS) consists of materials 
applied externally to the primary structural shell of the orbiter to 
maintain the orbiter airframe outer skin within acceptable 
temperature limits. The skins are constructed primarily of alumi¬ 
num and/or graphite epoxy. During entry they must be pro¬ 
tected from temperatures above 176°C (350°F). The TPS 
materials must be capable of performing a minimum of 
100 missions in which temperatures will range from a minus 
156°C (minus 250° F) in the cold soak of space to reentry 
temperatures that will reach nearly 1,648°C (3,000°F) on the 
wing leading edge and the nose cap. Interior compartment 
temperatures are controlled by internal insulation and heaters 
and through purging techniques. 

The TPS is a passive system selected for stability at high 
temperatures and weight efficiency. Its applications are as 
follows: 

1. Coated Nomex felt reusable surface insulation (FRSI) 
is used where temperatures are less than 371°C 
(700°F). FRSI is used on the upper payload bay 
doors, mid and aft fuselage sides, upper wing, and a 
portion of the orbital maneuvering system/reaction 
control system (OMS/RCS) pods. 

2. On Orbiter 102, the Columbia, low-temperature 
reusable surface insulation (LRSI) tiles are used where 
temperatures go below 648°C (1,200°F) and above 
371°C (700°F) nominal. These areas are the lower 
portion of payload bay doors; forward, mid, and aft 
fuselage; upper wing; vertical tail and a portion of the 
OMS/RCS pods. These tiles have a white surface 
coating in color which provides better thermal char¬ 
acteristics on orbit. 


On Orbiter 099, the Challenger, the LRSI tiles 
on the orbital maneuvering system/reaction 
control system (OMS/RCS) pods are replaced 
with a sewn composite blanket, advanced, 
flexible, reusable surface insulation (AFRSI), 
a quilted fabric blanket that improves producibil- 
ity and durability, reduces fabrication and 
installation cost, reduces installation schedule 
time, and results in a weight reduction. Subse¬ 
quent orbiters would also use AFRSI to replace 
all LRSI tiles. 

3. On Orbiter 102, the Columbia, high-temperature 
reusable surface insulation (HRSI) tiles are used where 
temperatures are below 1,260°C (2,300°F) and above 
648°C (1,200°F). The areas are the forward fuselage, 
lower mid fuselage, lower wing, selected areas of the 
vertical tail, a portion of the OMS/RCS pods, and 
around the forward fuselage windows. The HRSI has 
two different densities: one weighs 4 kilograms per 
cubic meter (9 pounds per cubic foot) and is used in 
all areas except around the nose and main landing gear 
doors, nose cap interface, wing leading edge, reinforced 
carbon-carbon/HRSI interface, external tank umbilical 
doors, vent doors, and vertical stabilizer leading edge. 
Those areas use HRSI tiles with a density of 9.9 kilo¬ 
grams per cubic meter (22 pounds per cubic foot). 
These tiles have a black surface coating necessary for 
entry emittance. 

On Orbiter 103 and subsequent orbiters, some of 
the HRSI 22-pounds-per-cubic-foot tiles may be 
replaced with fibrous refractory composite insula¬ 
tion (FRCI) HRSI tiles. The FRCI-12 tiles have a 
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Element* 

Area, 

sq m (sq ft) 

Weight, 
kg (lb) 
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RCC 

Miscellaneous 

332.7 (3581) 

254.6 (2741) 

479.7 (5164) 
38.0 (409) 

532.1 (1173) 

1014.2 (2236) 
4412.6 (9728) 

1697.3 (3742) 
918.5 (2025) 

Total 

1105.0 (11895 

8574.7(18,904) 
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yA **Some of Orbiter -099 

FRSI -White 

Xipt// / 


V/A ***Orbiter 103 and subseqdent., 

RCC - Light Gray 



J TBD - To Be Determined 


Reinforced Carbon-Carbon (RCC) 

High-Temperature, Reusable 
Surface Insulation (HRSI) 

Fibrous Refractory Composite 
Insulation (FRCI) 

Low Temperature, Reusable 
Surface Insulation (LRSI) 
Advanced Flexible Reusable 
Surface Insulation (AFRSI) 


[ 


Coated Nomex Felt Reusable 
Surface Insulation (FRSI) 
Metal or Glass 
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Element* 

Area, 

sq m (sq ft) 

Weight 

Kg (lb) 

FRSI 

332.7 (3581) 

532.1 (1173) 

LRSI** 

TBD 

TBD 

AFRSI**'*** 

TBD 

TBD 

HRSI** 

TBD 

TBD 

FRCI*** 

TBD 

TBD 

RCC 

38.0 (409) 

1697.3 (3742) 

Miscellaneous 


918.5 (2025) 

Total 

TBD 

TBD 


Thermal Protection System , Orbiter 099 and Subsequent Orbiters 
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HRSI Tiles 


density of 5.4 kilograms per cubic meter (12 
pounds per cubic foot). The FRCI HRSI tiles 
have improved strength, durability, and resistance 
to coating cracking. They also provide a weight 
reduction from that of the 99.8 percent-pure 
silica HRSI tiles. On Orbiters 103 and subsequent 
orbiters, FRCI-10 tiles may be used in place of 
the 9-pound-per-cubic-foot HRSI tiles. The 
FRCI-10 tiles have a density of 4.5 kilograms per 
cubic meter (10 pounds per cubic foot). 


Reinforced carbon-carbon (RCC) is used on the wing 
leading edge and nose cap, where temperatures exceed 
1,260°C (2,300° F). RCC is also used in the immediate 
area around the forward orbiter-external tank structural 
attachment on the orbiter. 



) 
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RCC Nose Cap 
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Additional materials are used in special areas. These are: 

1. Thermal panes are used for the windows. 

2. Metal is used for the forward reaction control system 
fairings and elevon seal panels on the upper wing 
elevon interface. 

3 . A combination of white and black-pigmented silica 
cloth for thermal barriers and gap fillers is installed 
around operable penetrations such as main and nose 
landing gear doors egress/ingress side hatch, umbilical 
doors, elevons, forward RCS module and RCS 
thrusters, vent doors, payload bay doors, rudder/speed 
brake, and OMS/RCS pod and RCS thrusters, and gaps 
between tiles in high differential pressure areas. 

The TPS has been designed for ease of maintenance and for 
flexibility of ground and flight operations while satisfying its 
primary function of maintaining acceptable airframe outer skin 
temperatures. 

The FRSI Nomex felt varies in thickness from 4.06 
millimeters (0.160 inch) to 10.1 millimeters (0.40 inch) thick 
and consists of sheets 0.9 by 1.2 meters (3 to 4 feet) (except for 
closeout areas) bonded directly to the orbiter exterior. The felt is 
coated with a white pigmented silicone elastomer to waterproof 
the felt and to provide the required thermal and optical 
properties. The FRSI provides an emittance of 0.8 and solar 
absorptance of 0.32. FRSI covers nearly 50 percent of the 
orbiter’s upper surface. 

The felt is a basic Nomex (aramid) fiber. The fibers are two 
denier 76.2 millimeters (3 inches) long and crimped. The fibers 
are loaded into a carding machine, which untangles the clumps of 
fibers and “combs” them to make a tenuous mass of lengthwise- 



) 


) 


oriented, relatively parallel fibers called a web. The cross-lapped 
web is fed into a loom, where it is lightly needled into a batt. 
Generally, two such batts are placed face to face, where they are 
needled together to form felt. The felt is then subjected to a 
multineedle-pass process until the desired strength is reached. 
The needled felt is then calendered to stabilize thickness 
4.06 millimeters (0.16 inch) to 10.1 millimeters (0.40 inch) by 
passing it through heated rollers at selected pressures. The 
calendered material is then heat-set at approximately 260°C 
(500° F) to thermally stabilize the felt. 

The FRSI is bonded to the orbiter surface by a room 
temperature vulcanizing silicon adhesive. The silicon adhesive 
glue is applied at 0.20 millimeter (0.008 inch) thick. The very 
thin glue line reduces weight and minimizes the thermal expan¬ 
sion during temperatures of 112°C (500°F) at the glue line 
(entry) and temperatures below minus 223°C (170°F) on orbit. 
The orbiter structure could be as low as minus 121°C (minus 
250°F). The FRSI bond is cured at room temperature, with 
vacuum bags used to apply pressure. 

On Orbiter 102, the HRSI tiles are nominally 152.4 by 
152.4 millimeters (6 by 6 inches). The tiles are made of a low- 
density (lightweight), high-purity silica (glass) 99.8 percent amor¬ 
phous fiber (fibers derived from common sand, one to two mils 
thick) insulation that is made rigid by ceramic (clay) bonding. 
Ninety percent of the tile is void, and ten percent is material that 
results in the tiles weighing 4 kilograms per cubic meter (9 pounds 
per cubic foot). However, the areas around the nose and main 
landing gear doors, external tank umbilical doors, vent doors, and 
vertical stabilizer leading edge utilize tiles that have a density of 
9.9 kilograms per cubic meter (22 pounds per cubic foot). A 
slurry containing fibers mixed with water is frame-cast to form 
soft, porous blocks to which collodial silica binder solution is 
added. When sintered, a rigid block is produced, which is then 
cut into quarters and then machined to the precise dimensions 
required for individual tiles. 
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The HRSI tiles will vary in thickness: 25.4 millimeters 
(1 inch) to 127 millimeters (5 inches) to minimize the orbiter 
weight and not permit the orbiter structure to see more than 
176°C (350°F). The tiles will vary slightly in sizes and shapes at 
the closeout areas. The tile thickness also provides adequate on- 
orbit space cold soak protection, and the tiles must withstand 
repeated heating and cooling, plus extreme acoustic environments 
(165 decibels at launch) in some local areas. Resistance to 
thermal shock is very good. The material can be taken from a 
1260°C (2300° F) oven and immersed in cold water without dam¬ 
age. Surface heat dissipates so quickly that an uncoated tile can 
be held by its edges with an ungloved hand seconds after removal 
from the oven and while the tile interior still glows red hot. The 
HRSI tiles are coated on the top and sides with a glass mixture 
formed by mixing tetra-silicide with boro-silicate glass in a 
powder with a liquid carrier and sprayed on the tile to a 
coating thickness of 16 to 18 mils. The coated HRSI tiles are 
then placed in an oven and heated to a temperature of 1260°C 
(2300°F). This results in a black waterproof glossy coating 
covering the tile which has a surface emittance of 0.85 and a 
solar absorptance of about 0.85. In addition, the silica fibers are 
treated with a silicone resin after the ceramic coating heating 
process to provide bulk waterproofing. 

Over 23,000 HRSI tiles are used on the bottom portion of 
the orbiter and nose areas of the orbiter in addition to other 
selected areas of the orbiter. The HRSI tiles cannot withstand 
airframe load deformation; therefore, stress isolation is necessary 
between the tiles and the orbiter structure. This isolation is 
provided by strain isolation pads (SIP’s). The SIP’s isolate the 
HRSI tiles from the orbiter’s structural deflections, expansions, 
and acoustic excitation. They thereby prevent stress failure in 
the tiles. The SIP is a thermal isolator. The SIP’s are made of 
the same Nomex felt material as the FRSI and are either 2.28 
millimeters (0.09 inch) or 4.06 millimeters (0.16 inch) thick. 
The SIP’s are bonded to the tiles, and the SIP/tile assemblies 


Lower Side -* 

0.6 mm (0.025 in.) min 
1.6 mm (0.065 in.) max 


•— Upper Side 
0.8 mm (0.035 in.) min 
1.9 mm (0.075 in.) max 



12.7 +1.5 mm 
(0.50 + 0.06 in.) 
\ 

Aluminum 
Skin 


Filler Bar 

(Coated Nomex Felt) 


/HRSI and LRSI 
Tile 


19 + 0.7 mm 
(0.75 + 0.03 in.) 


Strain Isolator 
Pad (SIP) 
(Nomex Felt) 


0.19 mm (0.0075 in.) 
of Room Temperature 
Vulcanizing Adhesive 


HRSI and LRSI Tile Interface, Orbiter 102 and 099 


are bonded to the orbiter structure by the same room tempera¬ 
ture vulcanizing process as in the FRSI. 


Since the HRSI tiles thermally expand or contract very little 
compared to the orbiter structure, it is necessary to leave gaps of 
25 to 65 mils between the tiles to prevent tile-to-tile contact. 
Insulation is required in the bottom of the gap between tiles and 
is of the same Nomex felt material as FRSI. It is referred to as a 
filler bar. The material is 2.28 millimeters (0.09 inch) or 4.0 mil¬ 
limeters (0.16 inch) thick material cut into strips 19.0 millimeters 
(0.75 inch) wide and bonded to the structure at the same time as 
the HRSI SIP pads. The filler bar is waterproof and temperature 
resistant up to approximately 426° C (800° F), top side exposure. 
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The LRSI and HRSI tiles that were removed from Orbiter 
102 at the Kennedy Space Center were replaced with tiles that 
are densified. The densification process was required due to fiber 
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polarization in the SIP manufacture, which resulted in stress con¬ 
centrations on the SIP/tile bond interface. The densification 
process utilizes a Ludox AS, which is an ammonia-stabilized 
binder. When mixed with silica slip particles, it becomes a 
cement. When mixed with water, it drys to a finished hard sur¬ 
face. A silica-tetraboride coloring agent is mixed with the com¬ 
pound for penetration identification. The pigmented Ludox slip 
slurry is brush-painted with several coats on the tile and allowed 
to air-dry for 24 hours. A heat treatment and other processing 
follow prior to installation. The densification coating only pene¬ 
trates the tiles about 2.79 millimeters (0.11 inch) to 1.77 
millimeters (0.07 inch), yet the strength and stiffness of the 
tile/SIP system are increased by a factor of two. Densified tiles 
will be used on Orbiter 099 and subsequent orbiters. 

On Orbiter 103 and subsequent orbiters, some of the 
FRCI-12 tiles may replace the HRSI 9.9-kilogram-per-cubic- 
meter (22-pound-per-cubic-foot) tiles. The FRCI-12 tiles have 
a density of 5.4 kilograms per cubic meter (12 pounds per cubic 
foot). On Orbiters 103 and subsequent orbiters, FRCI-10 HRSI 
tiles may replace the HRSI 4-kilogram-per-cubic-meter tiles. The 
FRCI-10 HRSI tiles have a density of 4.5 kilograms per cubic 
meter (10 pounds per cubic foot). 

The FRCI-12 and FRCI-10 HRSI tiles were developed by 
NASA’s Ames Research Center, Mountain View, California, and 
will be manufactured by Lockheed Missiles and Space Division, 
Sunnyvale, California, the same manufacturer of the original 99.8 
percent-pure silica HRSI tiles. 

The FRCI-12 and FRCI-10 HRSI tiles are a higher strength 
tile derived by adding AB 312 (alumino boro silicate fiber) called 
Nextel developed by the 3M Company in St. Paul, Minnesota to 
the 80 percent pure silica tile slurry. The Nextel activates boron 
fusion and figuratively welds the micron-size fibers of pure silica 
into a rigid structure during sintering in a high-temperature fur¬ 


nace. The resulting composite fiber refractory material com¬ 
posed of 20 percent Nextel and 80 percent silica fiber has entirely 
different physical properties than the original HRSI 99.8-percent 
pure silica tiles. The Nextel, with an expansion coefficient 10 
times that of the 99.8-percent pure silica, acts like a preshrunk 
concrete reinforcing bar in the fiber matrix. 


One characteristic of the FRCI-12 and FRCI-10 HRSI tiles 
places the reaction cured glass (black) coating into a compression 
as it is cured. This sharply reduces the sensitivity to cracking of 
coating during handling and operations. In addition to the 
improved coating compatibility, the FRCI-12 tiles are about 10 
percent lighter than the HRSI 99.8-percent pure silica tiles. This 
could reduce weight about 10 percent. The FRCI-12 and 
FRCI-10 HRSI tiles have also demonstrated a tensile (pull) 
strength at least three times greater than that of the HRSI 
99 .8-percent pure silica tiles and a use temperature approxi¬ 
mately 37°C (100°F) higher. 


The FRCI-12 and FRCI-10 HRSI tile manufacturing process 
is essentially the same as the 99.8-percent pure silica HRSI tiles, 
the only change being in the “wet end” prebinding of the slurry 
before it is cast. It also requires a higher sintering temperature, 
which could mean new furnaces are required. When dried, a rigid 
block is produced as in the 99.8-percent pure silica HRSI tile. 
These blocks will be cut into quarters and then machined to the 
precise dimensions required for each tile. The FRCI-12 and 
FRCI-10 tiles are the same 152.4- by 152.4-millimeters (6 by 6 
inch) tiles and vary in thickness from 25.4 millimeters (1 inch) to 
127 millimeters (5 inches). They will also vary in size and 
shape at the closeout areas as in the 99.8-percent pure silica 
HRSI tiles. The FRCI-12 and FRCI-10 HRSI tiles are bonded to 
the orbiter essentially the same as the 99.8-percent silica HRSI 
tiles. 
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FRCI Tile 


0.19 mm (0.0075 in 
of Room Temperature 
Vulcanizing Adhesive 


Strain 
Isolation 
Pad (SIP) 


n.) 1 


Lower Side-- 

0.6 mm (0.025 in.) min 
1.6 mm (0.065 in.) max 


12.7 + 1.5 mm 
(0.50 + 0.06 in.) 


Aluminum 

Skin 


Filler Bar 
(Coated Nomex Felt) 



•-Upper Side 

0.8 mm (0.035 in.) min 
1.9 mm (0.075 in.) max 


AFRSI 



0.19 mm (0.0075 in.) 
of Room Temperature 
Vulcanizing Adhesive 


FRCI Tile and AFRSI Interface, Orbiter 103 and Subsequent 

On Orbiter 102, the Columbia, the 99.8-percent pure silica 
LRSI tiles are the same construction and have the same basic 
functions as the 99 . 8 -percent pure silica HRSI tiles. They are 
thinner [5.0 to 35 millimeters (0.2 to 1.4 inches)] than the HRSI 
tiles to minimize orbiter weight. The 99.8-jpercent pure silica 
LRSI tiles are manufactured in the same manner as the 
99 . 8 -percent pure silica HRSI tiles, except that the tiles are 203 
by 203 millimeters (8 by 8 inches) and a white optical and 
moisture-resistant coating is applied ten mils thick to the top and 
side of the LRSI tiles. The white coating provides additional 
on-orbit thermal control for the orbiter. The coating comprises 
primarily silica compounds with shiny aluminum oxide to obtain 
optical properties. The coated 99 . 8 -percent pure silica LRSI tiles 
are treated with bulk waterproofing similar to the 99 . 8 -percent 
pure silica HRSI tiles. The 99 . 8 -percent pure silica LRSI tiles are 
installed on the orbiter in the same manner as the 99 . 8 -percent 
pure silica HRSI tiles (room temperature vulcanizing, SIP, filler 
bar, and vacuum bond-cure). The 99.8-percent LRSI has a 


surface emittance of 0.8 and a solar absorptance ot 0.32. More 
than 6000 99 . 8 -percent pure silica LRSI tiles are used. 


On Orbiter 099, the Challenger, the OMS/RCS pods 99.8- 
percent-pure silica LRSI tiles are replaced with an advanced 
flexible reusable surface insulation (AFRSI) quilted fabric 
blanket; on Orbiter 103 and subsequent orbiters the LRSI tiles 
are replaced with AFRSI. The AFRSI consists of a low density 
fibrous, silica batting which is made up of high-purity silica 
(glass), 99 . 8 -percent amorphous silica fibers (fibers derived from 
common sand and 1 to 2 mils thick). This batting is sandwiched 
between an outer woven silica high temperature fabric and an 
inner lower temperature woven glass fabric. The composite is 
sewn with silica thread, which provides a quilt like look. The 
AFRSI blankets are treated with a material to provide water- 
repellency. The AFRSI composite density is approximately 
4.9 kilograms per cubic meter (11 pounds per cubic foot) and 
varies in thickness from 11 to 24 millimeters (0.45 to 0.95 inch). 
The blankets are bonded directly to the spacecraft by a room 
temperature vulcanizing (RTV) silicon adhesive. The silicon 
adhesive is applied at a thickness of 5.08 millimeters (0.20 inch). 
The very thin glue line reduces weight and minimizes 
the thermal expansion during temperature changes. The sewn 
quilted fabric blanket is obtained in 0.9 by 0.9 meter (3 by 3 
feet) squares at the proper thickness by Johns Manville. Rock¬ 
well then cuts the blanket, if required, to fit and bonds the 
blanket to the spacecraft. 

The nose cap and the leading edges of the orbiter wing 
utilize reinforced carbon-carbon (RCC) panels to maintain airfoil 
shape above 1260°C (2300°F). The wing leading edge is made 
up of 44 RCC panels (22 each wing), whereas the nose cap is one 
piece. RCC fabrication begins with a nylon cloth graphitized and 
impregnated with a phenolic resin. This impregnated cloth is 
layed up as a laminate and cured in an autoclave. After cure, the 
laminate is pyrolized (taking the resin out) at high temperature 
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to convert the resin to carbon. The part is then impregnated 
with furfural alcohol in a vacuum chamber, then cured and pyro- 
lized again to convert furfural alcohol to carbon. This process is 
repeated three times until the required reinforced carbon-carbon 
is achieved. 


For it to become an oxidation-resistant coating, the material 
is packed in a retort with a dry pack material made up of a mix¬ 
ture of alumina, silicon, and silicon carbide. The retort is placed 



RCC Nose Cap, Orbiter 102 and 099 




in a furnace, and the coating process takes place in argon with a 
stepped-time-temperature cycle up to 1760°C (3200°F). A dif¬ 
fusion reaction occurs between the dry pack and carbon-carbon 
in which the outer layers of the carbon-carbon are converted to 
silicon carbides (whiteish-grey color) with no thickness increase. 
It is this silicon-carbide coating which protects the carbon-carbon 
from oxidation. Further oxidation resistance is provided by 
impregnation of a coated RCC part with tetraethyl-ortho silicate 
(TEOS). The RCC laminate is superior to a sandwich design 



RCC Nose Cap, Possibly Orbiter 103 and Subsequent 
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RCC Seal 
Strips (22 left 
and 22 right) 


Leading Edge RCC Panels 

700 Inft or»r) 07 rinhtl 



RCC Wing Panel 


I RCC Tee Sea! 


A-286 Bolts and r 
Inconel Bushings 


Flow Restrictor Seal 


RCC Wing Lead Edge , Orbiter 102 and 099 


RCC Seal 
Strips (22 left 
and 22 right) 


Leading Edge RCC Panels^ 
✓(22 left and 22 


FRCI-12 



A-286 Bolts and 
Inconel Bushings 


FRCI-12 
Flow Restrictor Seal 


RCC Wing Panel T RCC Tee Seal 

RCC Wing Leading Edge , Possibly Orbiter 103 and Subsequent 


because it is light in weight and rugged and it promotes internal 
cross radiation from the hot stagnation region to cooler areas, 
thus reducing stagnation temperatures and thermal gradients 
around the leading edge. The operating range of RCC is from 
minus 121°C (minus 250°F) to about 1648 C (3000 F). The 
RCC is highly resistant to fatigue loading, which will be 
experienced during ascent and entry. 

The RCC panels are mechanically attached to the wing with 
a series of floating joints to reduce loading on the panels due to 
wing deflections. The seal between each wing leading edge panel 
is referred to as a “tee” seal. The “tee” seals allow lateral motion 
and for thermal expansion differences between the RCC and the 
orbiter wing cooler structure, behind the leading edge. In addi¬ 
tion, it prevents the direct flow of hot boundary layer gases into 
the wing leading edge cavity during entry. The “tee” seals are 
constructed of RCC. 

Since carbon is not a good insulator, the adjacent aluminum 
and the metallic attachments are protected from exceeding 
temperature limits by internal insulation. Inconel 718 and A-286 
fittings are bolted to flanges on the RCC components and 
attached to the aluminum wing spars and nose bulkhead. Inconel- 
covered dynaflex insulation protects the metallic attach fittings 
and spar from the heat emitted from the inside surface of the 
RCC wing panels. The nose cap thermal insulation utilizes a 
blanket made from ceramic fibers and filled with silica fibers and 
some 99.8-percent pure silica HRSI tiles or possibly some FRCI 
tiles on Orbiter 103 and subsequent orbiters to protect the for¬ 
ward fuselage from the heat emitted from the hot inside surface 
of the RCC. 

Thermal barriers are utilized in the closeout between various 
components of the orbiter and the TPS such as the forward RCS 
and aft RCS, rudder/speedbrake, nose and main landing gear 
doors, crew hatch, vent doors, external tank umbilical doors, 
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vertical stabilizer/ai't fuselage interface, payload bay doors, wing 
leading edge RCC/HRSI interface, and nose cap/HRSI interface. 
The various materials utilized are white AB 312 ceramic alumina 
boro silica fibers or black pigmented AB 312 ceramic fiber cloth 
braided around an inner tubular spring made from Inconel X750 
wire with silica fibers within the tube, alumina mat, quartz thread, 
and Macor-machinable ceramic. 


Where surface pressure gradients would cause cross-flow of 
boundary layer air within the intertile gaps, tile gap fillers are 
provided to minimize increased heating within the gaps. The tile 
gap filler materials consist of white AB 312 ceramic alumina 
boro silica fibers or black pigmented AB 312 ceramic fiber cloth 
cover with alumina fibers within the cover and are used around 
the leading edge of the forward fuselage nose cap, windshields 
and side hatch, wing, vertical stabilizer and trailing edge of 
trailing edge of elevons, vertical stabilizer, rudder/speed brake, 
body flap, and heat shield of the Shuttle’s main engines. 
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Thermal Barriers, Orbiter 102 and 099 
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TPS Tile Gap Filler Locations 
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NOSE LANDING GEAR DOOR 
THERMAL BARRIER 


Strain Isolator Pad (SIP) 
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Typical TPS Gap Fillers and Thermal Barriers, Orbiter 102 and 099 
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NOSE LANDING GEAR DOOR 
THERMAL BARRIER 


Strain Isolator Pad (SIP) 



MAIN LANDING GEAR DOOR 
THERMAL BARRIER 



5.4 kg per cm 3 
(12 lb per cu ft) 
FRCI-12 
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Typical TPS Gap Fillers and Thermal Barriers , Orbiter 103 and Subsequent 
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96 millimeters 
(3.8 Inches) 
View B-B 


Elevon Ablator 
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Elevon Ablator With Access Attach Holes 
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Fused silica threaded inserts and plugs are used in the tiles 
to provide access through the tiles to remove door or access panel 
attachments. 

The split segments of the elevons (outboard end of each 
inboard elevon and inboard end of each outboard elevon) utilizes 
an ablative material that is replaced after each flight. These areas 
of the elevons could reach approximately 1815°C (3300°F) 
during entry. The ablative material is similar to that used on the 
Apollo Command Module heat shields. It consists of an phenolic 
honeycomb core arrangement with a phenolic resin (a type of 
reinforced plastic). The heat shield is covered with a black 
polyurethane paint. This material chars and evaporates during 
the entry heat load and prevents the heat from reaching the 
elevon aluminum skin. The ablator segments are attached to the 
elevon with fasteners and threaded ablative plugs are used to 
provide access to the fasteners for installation and removal. The 
weight of each ablator is approximately 25.85 kilograms (57 
pounds) each for a total weight of approximately 103.4 kilograms 


(228 pounds). Alternate materials are being studied for future 
flights such as; RCC, and a lightweight ablator. The elevon 
ablator contractor is AVCO Specialty Materials Division, Lowell, 
MA. 

The contractors are Vought Corporation, Dallas, TX (RCC); 
Lockheed Missiles and Space Co., Inc., Sunnyvale, CA (HRSI and 
LRSI tiles and HRSI-FRCI-10 and -12 tiles); Albany International 
Research Co., Dedham, MA (Nomex felt), General Electric, 
Waterford, NY (room temperature vulcanizing adhesive); 3M 
Company, St. Paul, MN (AB 312 fibers); Santa Fe Textiles, 
Santa Ana, CA (Inconel 750 wire spring and fabric sleeving); 
ICI United States, Inc., Wilmington, DE (alumina mat); J.P. 
Stevens Co., Los Angeles (quartz thread); Corning Glass Works, 
Corning, NY ('Maeor-machinable glass ceramic); Velcro Corn.. 
NY, NY (Velcro hooks and loops); Prodesco, Perkasie, PA 
(fibrous pile-S glass); Johns Manville, Waterville, Ohio (high 
purity silica glass); and Johns Manville, Manville, NJ (advanced 
flexible reusable surface insulation quilted fabric blanket). 
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ORBITAL MANEUVERING SYSTEM 


The orbital maneuvering system (OMS) provides the thrust 
for orbit insertion, orbit circularization, orbit transfer, rendez¬ 
vous and deorbit. The OMS is housed in two independent pods 
located on each side of the orbiter’s aft fuselage. The pods also 
house the aft reaction control system and are referred to as the 
orbital maneuvering system/reaction control system (OMS/RCS) 
pods. Each pod contains one OMS engine and the hardware 
needed to pressurize, store, and distribute the propellants to 
perform the velocity maneuvers. The two pods provide the 
redundancy for the OMS. 

The first OMS thrusting (OMS-1 insertion) is used to raise 
the orbiter’s orbit from 80 by 14 nautical miles (92 by 16 statute 


miles), which is attained at main engine cut-off (MECO) to a 
pre-mission selected value of apogee attitude. The crew has the 
ability to modify the targeting data in the computers by inserting 
new values via the CRT keyboard unit. A nominal OMS-1 
thrusting period of 41 meters (135 feet) per second takes about 
one minute and nine seconds and results in an orbit of 120 by 48 
nautical miles (132 by 55 statute miles). 

The OMS-2 thrusting period occurs near the apogee of the 
orbit established by OMS-1 thrusting, and is used to circularize 
the orbit. The targeting data for this thrusting period also is 
selected before the mission and also can be modified by the flight 
crew if necessary. 
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OMS Oxidizer Tank 


OMS Engine Characteristics 

Thrust 

Specific Impulse 
Chamber Pressure 
Mixture Ratio 

Gimbal Capability 

26,688 Newtons (6000-lb) Vacuum 

313 Seconds 

125 psia 

1.65 

( +6° Pitch 
\ +7° Yaw 


OMS AV Capability 
Usable OMS Propellant: 


304 m/s (1000 f/s) 29,484-kg 
(65,000-lb) Payload 
10,830 kg (23,876 lb) Total 
6,743 kg (14,866 lb) of N 2 O 4 
4,086 kg (9,0101b) of MMH 
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Orbital Maneuvering System 


Additional OMS thrusting periods are performed according 
to specific mission requirements: to modify the orbit to perform 
a rendezvous to deploy a payload, or to transfer to another orbit. 

Deorbit thrusting normally is performed with the two OMS 
engines. Target data for the deorbit maneuver is computed by the 
ground and loaded in the GPC’s via uplink. This data also is 
voiced to the flight crew for verification of loaded values. After 
verifying the correct deorbit data, the flight crew initiates the 
OMS gimbal test via item entry in the CRT/keyboard unit. Once 
the test is complete, the flight crew maneuvers the spacecraft to 
the desired deorbit thrusting attitude, using the rotational hand 
controller and RCS thrusters. Upon the completion of the 
thrusting period the OMS engines are disarmed and any residual 


velocity is nulled by the use of the translation hand controller 
(THC) and RCS thrusters. 

The system in each pod consists of a high pressure gaseous 
helium storage tank, pressure regulation system, pressure relief 
valves, fuel tank, oxidizer tank, propellant distribution system, 
OMS engine, plus 12 RCS primary and two RCS vernier engines. 
(The RCS is described in the RCS section.) 

In each of the two OMS pods, gaseous helium pressure is 
supplied to the oxidizer and fuel tanks, which, in turn, supply 
the oxidizer and fuel under pressure to that OMS engine. The 
propellants are nitrogen tetroxide as the oxidizer and mono- 
methylhydrazine as the fuel. The propellants are earth-storable 
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and hypergolic (ignite upon contact with each other). The 
propellants are directed to the OMS engine, where they ignite 
(hypergolic), producing a hot gas, thus thrust. 

When the fuel reaches the engine, it is directed first through 
the combustion chamber walls (this regeneratively cools the 
chamber walls) and then into the engine injector. The oxidizer 
goes directly into engine injector. The nozzle extension is 
radiant-cooled and constructed of aluminum alloy. 

Each OMS engine provides 26,688 Newtons (6,000 pounds) 
of thrust. The oxidizer-to-fuel mixture ratio is 1:65, the 
expansion ratio of the nozzle exit to the throat is 55:1, the dry 
weight of the engine is 117 kilograms (260 pounds), and the 
chamber pressure of the engine is 6,468 millimeters of mercury 
(mmHg) (125 psia). 

Each OMS engine is reusable for 100 missions and capable 
of 1,000 starts and 15 hours of cumulative firing. The minimum 
firing duration of an OMS engine is two seconds. The OMS may 
be utilized to provide thrust above 21,336 meters (70,000 feet). 
For velocity changes of between 0.9 and 1.8 meters per second 
(3 and 6 feet per second), the normal operating mode is one OMS 
engine. 

Each engine has two electromechanical gimbal actuators, 
which control the OMS engine thrust direction in pitch and yaw 
(thrust vector control). The OMS engines can be used singly by 
directing the thrust vector through the orbiter center of gravity 
or together by directing the thrust vector of each engine parallel 
to the other. It is noted that during a two-OMS-engine thrusting 
period, the RCS will come into operation only in the event the 
OMS gimbal exceeds gimbal rate or gimbal limits and should not 
normally come into operation during the OMS thrust period. 
However, during a one-OMS engine thrusting period, roll RCS is 
required. The pitch and yaw actuators are identical except for 


the stroke length and contain redundant channels (active and 
standby), which couple to a common drive assembly. 

The OMS/RCS pods are designed to be reused for up to 100 
missions with only minor repair, refurbishment, and main¬ 
tenance. The pods are removable to facilitate orbiter turnaround 
from a mission, if required. 

HELIUM PRESSURIZATION 

The pressurization system consists of helium tanks, helium 
pressurization valves, two dual-pressure regulator assemblies, 
parallel vapor isolation valves, dual-series/parallel check valve 
assemblies, and pressure relief valves. 

The helium storage tank in each pod consists of a titanium 
liner with a fiberglass structural overwrap. This increases safety 
and decreases the weight of the tank 32 percent over that of 
conventional tanks. The helium tank is 1021 millimeters (40.2 
inches) in diameter with a volume of 0.48 cubic meter (17.03 
cubic feet) minimum. Its dry weight is 123 kg (272 pounds). The 
helium tank operating pressure range is 248,400 to 23,805 
millimeters of mercury (mmHg) (4,800 to 460 psia) with a 
maximum operating limit of 252,281 mmHg (4,875 psia) at 
37°C (100°F). 

A pressure sensor downstream of each helium tank in each 
pod monitors the helium source pressure and transmits it to the 
“N2, He, Kit He” switch on Panel F7. In the He position the left 
and right OMS helium pressure is displayed on the “OMS Press 
Left, Right” meters. This pressure also is transmitted for display 
on the CRT. 

The two helium pressurization valves in each pod permit 
helium source pressure to the propellant tanks or isolate the 
helium from the propellant tanks. The parallel paths in each pod 
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assure helium flow to the propellant tanks of that pod. The 
helium valves are continuous-duty and solenoid-operated. The 
valves are energized open and spring-loaded closed. The “OMS He 
Press/Vapor Isol” switches on Panel 08 permit automatic or 
manual control of the valves. With the switches in the GPC 
position, the valves are automatically controlled by the GPC 
during an engine thrusting sequence. The valves are controlled 
manually by placing the switches to the OPEN or CLOSE 
positions. 

The pressure regulators reduce the helium source pressure to 
the desired working pressure. Pressure regulation is accomplished 
by two pressure-regulating assemblies, one downstream of each 
helium pressurization valve. Each assembly contains primary and 
secondary regulators in series and a flow limiter. The primary 
regulator is normally the controlling regulator. The secondary 
regulator is normally open during a dynamic flow condition. The 
secondary regulator will not become the controlling regulator 
until the primary regulator allows a higher pressure than normal, 
thus allowing the secondary regulator to assume control. All 
regulator assemblies are in reference to a bellows assembly that is 
vented to ambient. The primary regulator outlet pressure at 
normal flow is 13,041 to 13,558 mmHg (252 to 262 psig) and at 
high flow is 12,782 mmHg (247 psig) minimum, with lockup at 
13,765 mmHg (266 psig). The secondary regulator outlet 
pressure at normal flow is 13,403 to 13,920 mmHg (259 to 269 
psig) and at high flow is 13,144 mmHg (254 psig) minimum, 
with lockup at 14,127 mmHg (273 psig). The flow limiter 
restricts the flow to a maximum of 29 cubic meters (1040 cubic 
feet) per minute and to a minimum of 8 cubic meters (304 cubic 
feet) per minute. 

The vapor isolation valves located in the oxidizer pressuriza¬ 
tion line to the oxidizer tank prevent oxidizer vapor from 
migrating upstream to the pressure regulators, which could 
degrade the pressure regulators. These are low pressure, two- 
position, two-way, solenoid-operated valves. The valves are 
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energized open and spring-loaded closed. They can be com¬ 
manded manually or automatically by the positioning of the 
“He Press/Vapor Isol” switches on Panel 08. When either of the 
two switches A or B are in the OPEN position, both vapor 
isolation valves are energized open and when both switches A or 
B are in the CLOSE position, both vapor isolation valves, are 
closed. When the A and B switches are in the GPC positions, the 
GPC opens or closes the valves automatically. 

The check valve assembly in each parallel path contains four 
independent check valves connected in a series-parallel configura¬ 
tion provide a positive-checking action against a reverse flow of 
propellant liquid or vapor and the parallel path permits 
redundant paths of helium to be directed to the propellant tanks. 
Filters are incorporated in the inlet of each check valve assembly. 

Two-pressure sensors in the helium pressurization line 
upstream of the fuel and oxidizer tanks monitor the regulated 
tank pressure and transmit it to the RCS/OMS PRESS rotary 
switch on Panel 03. When in the OMS PRPLNT position, the left 
and right fuel and oxidizer pressure are displayed. If the tank 
pressure is lower than 12,109 mmHg (234 psia) or above 14,697 
mmHg (284 psia), the applicable left or right OMS red caution/ 
warning light on Panel F7 will illuminate. These pressures also 
are transmitted for display on the CRT. 

The relief valves in each pressurization path limit excessive 
pressure in the propellant tanks. Each pressure relief valve 
consists of a relief valve, a burst diaphragm, and a filter. In the 
event of excessive pressure caused by helium or propellant vapor, 
the diaphragm ruptures and the relief valve opens and vents the 
excessive pressure overboard. The filter prevents particulates 
from the non-fragmentation type diaphgram from entering the 
relief valve seat. The relief valve will close and reset after the 
pressure has returned to the operating level. The burst 
diaphragm is used to provide a more positive seal of helium than 





Panel 03 

the relief valve. The diaphragm ruptures between 15,680 and 
16,197 mmHg (303 to 313 psig). The relief valve opens at a 
minimum of 14,697 mmHg (284 psig) and a maximum of 16,197 
mmHg (313 psig). The relief valve minimum reseat pressure is 
14,490 mmHg (280 psig). The maximum flow capacity of the 
relief valve at 15°C (60°F) and 16,197 mmHg (313 psig) is 14 
cubic meters (520 cubic feet) per minute. 

PROPELLANT STORAGE AND DISTRIBUTION 

The propellant storage and distribution system consists of 
one fuel and one oxidizer tank in each pod. It also contains 
propellant feed, interconnect lines, and isolation valves. 

The OMS integral propellant tankage of both pods provides 
the capability of a 304 meter-per-second (1,000-foot-per-second) 
velocity change with a 29,484-kilogram (65,000-pound) payload 
in the orbiter’s payload bay. An OMS pod crossfeed line allows 
use of the propellants in both pods for operation of either OMS 
engine. 
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The propellant supply is contained in domed cylindrical 
titanium tanks within each pod. Each propellant tank is 
2448 millimeters (96.38 inches) long with a diameter of 
1247.1 millimeters (49.1 inches) and a volume of 0.54 cubic 
meters (89.89 cubic feet) unpressurized. The dry weight of each 
tank is 113 kg (250 pounds). The propellant tanks are 
pressurized by the helium system. 

Each tank contains a propellant acquisition and retention 
assembly in the aft end. Each tank is divided into two 
compartments: forward and aft. The propellant acquisition and 
retention assembly is located in the aft compartment and consists 
of an intermediate bulkhead with communication screen and an 
acquisition system. The propellant in the tank is directed from 
the forward compartment through the intermediate bulkhead via 
the communication screen into the aft compartment during OMS 
velocity maneuvers. The communication screen retains propellant 
in the aft compartment during zero-g conditions. 

The acquisition assembly consists ot tour stub galleries and 
a collector manifold. The stub galleries acquire wall bound 
propellant at OMS starting and during RCS velocity maneuvers to 
prevent gas ingestion. The stub galleries have screens which allow 
propellant flow while preventing gas ingestion. The collector 
manifold is connected to the stub galleries and also contains a gas 
arrestor screen to further prevent gas ingestion which permits 
OMS engine ignition without the need of a propellant settling 
maneuver employing RCS thrusters. The propellant tank opera¬ 
ting pressure limit is 12,937 mmHg (250 psi), with a maximum 
operating pressure limit of 16,1971 mmHg (13 psia). 

A capacitance gauging system is installed in each OMS 
propellant tank to measure the propellant in that tank. The 
system consists of capacitance gauging with a forward and aft 
probe, and a totalizer. The forward and aft fuel probes use fuel 
(which is a conductor) as one plate of the capacitor and a glass 


tube which is metallized on the inside as the other. The forward 
and aft oxidizer probes use two concentric nickel tubes as the 
capacitor plates, and oxidizer as the dielectric. (Helium is also a 
dielectric, but has a different dielectric constant from the 
oxidizer.) The aft probes in each tank contain a resistive 
temperature-sensing element to provide correction to variations 
in fluid density. The bottom of the tanks and the area of the 
communication screens cannot be measured. 

The totalizer receives OMS valve operation information and 
inputs from the forward and aft probes from each tank, and 
outputs total and aft quantities, and a low-level quantity output. 
The inputs from the OMS valves allow control logic in the 
totalizer to determine when an OMS engine is thrusting and 
which tanks are being used. The totalizer begins an engine flow 
rate/time integration process at the start of the OMS thrusting 
period, which reduces the indicated amount of propellants by a 
preset estimated rate for the first 14.8 seconds. After 14.8 
seconds of OMS thrusting, the probe capacitance gauging system 
outputs are enabled, which permits the display of actual 
propellant quantity remaining. The totalizer and capacitance 
gauging is displayed on the OMS/RCS PRPLNT QTY meters 
on Panel 03 when the rotary switch is positioned to OMS FUEL 
or OXID positions. 

When the wet or dry analog comparator indicates the 
forward probe is dry, the ungaugable propellant in the region of 
the intermediate bulkhead is added to the aft probe output 
quantity, decreasing the total quantity at a preset rate for 98.15 
seconds, and inhibits updates from the probes. After 98.15 
seconds of thrusting, the aft probe output inhibit is removed and 
the aft probe updates the total quantity. When the quantity is 
less than five percent, the low-level signal is output. 

The propellant from each tank in a pod flows through 
parallel ac motor-driven isolation valves that can be actuated 
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manually by the OPEN or CLOSE position or automatically by 
the GPC position of the tank isolation A or B switch on Panel 08. 
The left and right OMS tank isolation A or B valves permit 
propellant flow to the OMS engine of that pod or isolate 
propellant flow to the OMS engine. An indicator above each 
switch on Panel 08 indicates the status of that set of valves (one 
fuel and one oxidizer valve for set A and set B). OP (open) 
when both valves are open, barber pole with the valves are in 
transit or one valve is open and one closed, and CL (close) 
when both valves are closed. 

ENGINE BIPROPELLANT VALVE ASSEMBLY 

Each OMS engine receives the pressure-fed propellants at its 
bipropellant valve assembly. The bipropellant valve assembly 
consists of a gaseous nitrogen (GN 2 ) pressure vessel, an engine 
pressurization valve, a GN 2 regulator, a GN 2 relief valve, a check 
valve, a line reservoir, engine purge valves with a check valve, 
solenoid control valves, actuators, and bipropellant ball valves. 

One GN 2 spherical tank is mounted on each bipropellant 
valve assembly to supply pressure to that engine pressurization 
valve. The tank contains enough GN 2 to operate the ball valves 
and purge the engine 10 times. The nominal GN 2 tank capacity is 
983 cubic centimeters (60 cubic inches). The maximum tank 
operating pressure is 155,250 mmHg (3,000 psig), with a proof 
pressure of 310,500 mmHg (6,000 psig). 

Two pressure sensors downstream of the GN 2 tank monitor 
the pressure; the N 2 , He, Kit He switch on Panel F7, when 
positioned to N 2 , displays tank pressure on the “OMS Press 
N 2 Tank Left, Right’ meters. 

The GN 2 engine pressurization valve, one for each engine, 
are dual-coil solenoid-operated valves. Each valve is energized 
open and spring-loaded closed. The engine pressurization valve 
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permits GN 2 flow to the control ball valves and purge valves 1 
and 2 or blocks the flow. The GN 2 engine pressurization valves 
are controlled by the OMS ENG-LEFT RIGHT switches on Panel 
C3. When the OMS ENG LEFT switch is placed in the ARM 
PRESS position, the left OMS engine pod’s pressurization valve is 
energized open. When the OMS ENG RIGHT switch is placed in 
the ARM PRESS position, the right OMS engine pod’s pressuriza¬ 
tion valve is energized open. The GN 2 engine pressurization 
valve, when energized open, allows GN 2 supply pressure to be 
directed into a regulator, through a check valve, an in-line 
reservoir, and to a pair of engine control valves. The engine 
control valves are controlled by the OMS thrust ON/OFF 
commands from the GPC’s. 

A single-stage regulator is installed in each GN 2 pneumatic 
control system between the GN 2 engine pressurization valve and 
the engine bipropellant valves. The regulator reduces the GN 2 
service pressure to a desired working pressure between 16,301 
and 17,336 mraHg (315 and 335 psig). 

Each pneumatic control system has a pressure relief valve 
downstream of the GN 2 regulator. This relief valve limits the 
pressure applied to the engine control valve in the event of a GN 2 
pressure regulator malfunction preventing damage to the engine 
control valves and bipropellant ball valve actuators. The valve 
relieves at 23,287 mmHg (450 psig) and resets at 20,700 mmHg 
(400 psig). 

A pressure sensor downstream of the GN 2 regulator 
transmits the regulated GN 2 pressure to the CRT display. 

A check valve downstream of the GN 2 regulator closes to 
isolate the GN 2 source pressure side of the valve in the event of 
loss of GN 2 pressure upstream of the check valve. 

A 311-cubic centimeter (19-cubic-inch) GN 2 spherical 
reservoir is installed downstream of the check valve and upstream 


from the engine control valves. The reservoir accumulates enough 
GN 2 to provide the pressure necessary to operate the engine 
bipropellant ball valves one time with the GN 2 pressurization 
valve closed or in the event of loss of pressure in the line 
upstream of the check valve. 

In the GN 2 engine pressurization system there are two 
solenoid-operated, three-way, two-position control valves for 
actuator control and positioning of the ball valves. Control valve 
No. 1 controls No. 1 actuator and two ball valves. Control valve 
No. 2 controls the No. 2 actuator and two ball valves. Each 
control valve has two solenoid coils; energizing either coil will 
open the control valve. 

The right OMS engine GN 2 solenoid control valves 1 and 2 
are energized open by computer commands provided that the 
RIGHT OMS ENG switch on Panel C3 in the ARM or ARM/ 
PRESS position and the RIGHT OMS ENG VLV switch on 
Panel 016 is on; the valves are de-energized normally when thrust 
off is commanded or if the RIGHT OMS ENG switch is 
positioned to OFF. The left OMS engine GN 2 solenoid control 
valves 1 and 2 are controlled in the same manner except through 
the LEFT OMS ENG switch on panel C3 and the left OMS ENG 
VLV switch on panel 014. 

When the GN 2 solenoid control valves are energized open, 
the regulated GN 2 pressure is directed into the two GN 2 
actuators of that engine. The GN 2 acts against the piston in each 
actuator, overcoming the spring force on the opposite side of 
each actuator. Each actuator has a rack and pinion gear and the 
linear motion of the actuator connecting arm is converted into 
rotary motion which drives two ball valves, one fuel and one 
oxidizer, to the open position. Each pair of ball valves opens 
simultaneously. Fuel and oxidizer is then directed to the injector 
of the engine, where the hypergolic propellants ignite, producing 
thrust. 
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Each OMS engine has a sensor that monitors its chamber 
pressure and transmits it to the OMS PRESS LEFT and RIGHT 
PC (chamber pressure) meter on Panel F7. 

When the computer commands are removed from the 
solenoid control valves or an engine’s OMS ENG switch on Panel 
or ENG VLV switch on Panel 014/016 is positioned OFF, the 
solenoid control valves are de-energized removing the regulated 
GN2 pressure from the actuators and venting the gas in the 
actuators. The actuator spring forces the actuator piston to 
move in the opposite direction and the GN2 goes back through 
the solenoid control valve and is vented overboard. The 
actuators drive the fuel and oxidizer ball valves closed 
simultaneously. The series arrangement of ball valves ensure 
engine thrust termination. 

Each actuator incorporates a linear position transducer 
which supplies information on ball valve positioning to a CRT 
and also to the OMS gauging system, where gauging processes are 
intiated upon detecting both valves open or terminated when 
both valves are closed. 

Check valves are installed in the vent port outlet of each 
GN 2 solenoid control valve on the spring pressure side of each 
actuator to protect the seal of these components from the hard 
vacuum of space. 

Each engine has two engine purge valves in series. These 
valves, solenoid-operated open and spring-loaded closed, are 
normally energized open after each thrusting period by the GPC’s 
unless inhibited by a crew entry on the MANEUVER CRT 
display. When the two purge valves of an engine are opened 0.36 
second after OMS engine control valve command terminates, 
GN 2 is permitted to flow through the valves and a check valve in 
the fuel line downstream of the ball valves and out through the 
engine injector and combustion chamber to space for two 


seconds. This purges the residual fuel from the combustion 
chamber and injector of the engine, permitting a safe engine 
restart. The purge valves are then de-energized and closed. When 
the purge is completed, the GN2 tank pressurization supply valve 
is closed, placing the respective OMS ENG switch (Panel C3) to 
OFF. The check valve downstream of the purge valves prevents 
the fuel from flowing to the engine purge valves during engine 
thrusting. 

ENGINE 

When the fuel reaches the thrust chamber, it is directed first 
through 102 coolant channels in the combustion chamber wall, 
providing regenerative cooling to the combustion chamber walls, 
then to the injector of the engine. The oxidizer is routed directly 
to the injector. The platelet injector assembly consists of a stack 
of plates, each with an etched pattern that provides for proper 
distribution and propellant injection velocity vector. The stack is 
diffusion-bonded and welded to the back side of the injector. 
The fuel and oxidizer orifices are positioned so that they will 
impinge and atomize, causing fuel and oxidizer ignition because 
of hypergolic reaction. 

The contoured nozzle extension is bolted to the aft flange 
of the combustion chamber. The nozzle extension is made of a 
columbium alloy and is radiantly cooled. 

The nominal flow rate of oxidizer and fuel to each engine is 
5.4 kilograms (11.93 pounds) per second and 3.2 kilograms (7.23 
pounds) per second, respectively. The vacuum specific impulse 
of each engine is 313 seconds. 

OMS THRUSTING SEQUENCE 

The OMS thrusting sequence commands the OMS engines 
on or off and commands the engine, purge function. The flight 
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crew can select, via item entry on the maneuver display, a one - 
or two-engine thrusting period, and can inhibit the OMS engine 
purge. 

The sequence determines which engines are selected and 
then provides the necessary computer commands to open the 
appropriate helium vapor isolation and engine GN2 solenoid 
control valves 1 and 2 and sets an engine-on indicator. The 
sequence will monitor the OMS engine fail flags and, if one or 
both engines have failed, issue the appropriate OMS cutoff 
command as soon as the crew has confirmed the failure by 
placing the “OMS Eng” switch in the Off position. This will then 
result in the appropriate engine(s) control valve commands being 
terminated. 

In a normal OMS thrusting period, when the OMS cutoff 
flag is true, the sequence terminates commands to the helium 
pressurization, helium vapor, and GN 2 engine control valves 1 
and 2. If the engine purge sequence is not inhibited, the 
sequence will check for the left and right engine ARM PRESS 
signals and, after 0.36 second open the engine GN 2 purge valves 
for two seconds for the engines which have the ARM PRESS 
signals present. 

THERMAL CONTROL 

OMS thermal control is achieved by insulation on the 
interior surface of the pods that enclose the OMS hardware 
components and the use of strip heaters. Line-wraparound 
heaters and insulation control the crossfeed lines. The heaters 
prevent propellant from freezing in the tanks and lines. The 
heater system is divided into two areas: the OMS/RCS pods and 
the aft fuselage crossfeed and bleed lines. Each heater system has 
two redundant heater systems, A and B, and are controlled by 
the RCS/OMS HEATERS switches on Panel A14. 


Steel Foil 
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OMS Crossfeed System Tubing Insulation Installation 

Each OMS/RCS pod is divided into nine heater areas. Each 
of the heater patches in the pods contains an A and B element, 
and each element has a thermostat which controls the temperature 
from 12° to 12°C (55° to 75°F). These heater elements are 
controlled by the LEFT and RIGHT POD switches on Panel A14. 
Temperature sensors located throughout the pods supply temper¬ 
ature information to the propellant thermal CRT display and 
telemetry. 

The crossfeed line thermal control in the aft fuselage is 
divided into 11 heater areas. Each area is heated in parallel by 
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heater systems A and B, and each area has a control thermostat 
to maintain temperature at 12°C minimum (55°F) to 23°C 
(75°F) maximum. These heater elements are controlled by the 
respective CRSFD LINES switch on Panel A14. Temperature 
sensors are located on the control thermostats and on the 
crossfeed and bleed lines. The temperature sensors supply 
temperature information to the propellant thermal CRT display 
and telemetry. 

ENGINE GIMBAL AND CONTROL ASSEMBLY 

The engine gimbal and control assembly consists of a gimbal 
ring assembly, a gimbal actuator assembly, and a gimbal actuator 
controller. The engine gimbal ring assembly and the gimbal 
actuator assembly provide the OMS thrust vector control by 
gimbaling the engines in pitch and yaw. Each engine has a pitch 
actuator and a yaw actuator. Each actuator is extended or 
retracted by a pair of dual-redundant electric motors and are 
actuated by GPC control signals. 

The gimbal ring assembly contains the two mounting pads 
to attach the engine to the gimbal ring and the two pads to 
attach the engine gimbal ring to the orbiter, which transmits the 
engine thrust through the mounting pads. 

The pitch and yaw gimbal actuator assembly for each OMS 
engine provides the force to gimbal the engines. Each actuator 
has a primary and secondary servo control unit housed in the 
gimbal actuator controller. The primary and secondary channels 
are isolated and are not operated concurrently. Each actuator 
consists of redundant brushless dc motors, gear train, jack screw 
and nut-tube assembly, and linear position feedback. A GPC 
position command signal from the primary servo control unit 
energizes the primary dc motor, which is coupled with a 
reduction gear and a no-back device. The output from the 
primary power train drives the jack screw of the drive assembly, 


causing the nut-tube to translate (with the secondary power train 
at idle) and results in angular engine movement, providing linear 
travel. If the primary power train is inoperative, a GPC position 
command from the secondary servo control unit energizes the 
secondary dc motor, and results in angular engine movement, 
providing linear travel by applying torque to the nut-tube 
through the spline that extends along the nut-tube for the stroke 
length of the unit. Rotation of the nut-tube about the stationary 
jack screw causes the nut-tube to move along the screw. The 
no-back device prevents backdriving of the standby system. 

The electrical interface, power, and electronic control 
elements for active and standby control channels are assembled 
in separate enclosures designated as active actuator controller and 
standby actuator controller. These are mounted on the OMS/ 
RCS pod structure. The active and standby actuator controllers 
are electrically and mechanically interchangeable. 

The gimbal assembly provides control angles of plus or 
minus six degrees in pitch and plus or minus seven degrees in yaw 
with clearance provided for an additional one degree for 
snubbing and tolerances. The engine null position is with the 
engine nozzles up 15° 49 seconds (as projected in the orbiter XZ 
plane) and outboard 6° 30 seconds (measured in the 15° 
49 minutes plane). 

The thrust vector control (TVC) command SOP (software 
operating procedure) processes and outputs pitch and yaw OMS 
engine actuator commands, and the actuator power selection 
discretes. The OMS TVC command SOP is active during OPS 
(operational sequences), orbit insertion (OMS-1 and OMS-2), 
orbit coast, deorbit, deorbit coast, and RTLS (return to launch 
site) abort. 

The flight crew can select either the primary or the 
secondary motors of the pitch and yaw actuators by item entry 
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on the maneuver display, or can select actuators off. The 
actuator command outputs are selected by the TVC command 
SOP depending upon the MM (major modes), deorbit maneuver 
coast, and RTLS abort, CG (center of gravity) TRIM and 
GIMBAL CHECK flags. The deorbit maneuver coast flag causes 
the TVC command SOP to output I-loaded valves to command 
the engines to the entry stowed position. The presence of the 
RTLS abort and CG trim flags causes the engines to be 
commanded to a predefined position with the thrust vector 
through the CG. The MM RTLS flag by itself will cause/the 
engines to be commanded to a stowed position for RTLS (return 
to launch site) entry. The gimbal check flag causes the engines to 
be commanded to plus 7° yaw and 6° pitch, then to minus 
7° yaw and 6° pitch, then back to 0° yaw and pitch. In the 
absence of these flags, the TVC command SOP will output the 
digital autopilot (DAP) gimbal actuator commands to the engine 
actuators. The backup flight control system (BFS) allows only 
manual TVC during a thrusting period, but it is otherwise similar. 

The OMS TVC feedback SOP monitors the primary and 
secondary actuator selection discretes from the maneuver display 
and performs compensation on the selected pitch and yaw 
actuator feedback data. This data is output to the OMS actuator 
fault detection and identification (FDI) and to the maneuver 
display. The OMS TVC feedback SOP is active in OPS orbit 
insertion OMS-1, OMS-2, orbit coast, deorbit maneuver, and 
deorbit maneuver coast. The present OMS gimbal positions can 
be monitored on the maneuver CRT display when this SOP is 
active and the primary or secondary actuator motors are selected. 

PAYLOAD BAY KIT 

The payload bay kit supplies extra propellant to the OMS 
for additional thrusting capability. Extended missions, which 
would increase weight in the orbiter but provide additional 
altitude capabilities, could require up to three self-contained 


OMS propellant kits (helium, fuel, and oxidizer tanks—same as in 
the pods). This would be added in the orbiter payload bay. Each 
OMS kit provides the orbiter with an additional 152 meters-per- 
second (500 foot-per-second) velocity capability. With the basic 
OMS and three additional kits, the orbiter would have a total 
velocity change capability of 762 meters-per-second (2500 feet- 
per-second). 


The first kit installed requires its own helium tank, pressure 
regulators, isolation valves, and propellant tanks. This kit is 
functionally identical to a single OMS engine propellant supply 
system. This kit does not duplicate the crossfeed valves, the 
engine bipropellant ball valves, the nitrogen engine supply circuit, 
or the engine. After the first payload bay kit has been installed, 
each additional payload bay kit requires only an additional 
helium tank, fuel tank, and oxidizer tank. The additional helium 
tanks are connected to the first helium tank in parallel; the 
additional propellant tanks in series to each other (fuel to fuel 
and oxidizer to oxidizer). 

The connection of the payload bay kit to the left and right 
OMS/RCS pods is made at the two crossfeed lines downstream 
from the payload bay kit tank isolation valves and between the 
left and right OMS crossfeed valves. 

When a payload bay kit is installed, the selection of 
propellant sources for the OMS engines, whether from their own 
pods or the payload bay kits, will be made either manually by 
the flight crew or automatically by the GPC’s based on the 
configuration of the switches on Panel 08 and keyboard entries 
by the flight crew. 


The payload bay kit components are identical to those in 
the OMS left and right pods. 
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Typical 

Payload Bay Kit Maximum Envelope 
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Payload Bay Kit Helium Pressurization 


A pressure sensor downstream of the helium tanks monitors 
the helium source pressure and transmits it to the N 2 , HE, KIT 
HE switch on Panel F7. When in the KIT HE position, kit 
helium tank pressure is displayed on the OMS PRESS HE KIT 
meter. The pressure is also transmitted to the CRT. 

The two helium pressurization valves in the OMS payload 
bay kit permit helium source pressure to the propellant tanks or 
isolate the helium. The parallel paths in the payload bay kit 
ensure helium flow to the propellant tanks of the payload bay 
kit. The valves are energized open and spring-loaded closed. The 
OMS KIT HE PRESS VAPOR ISOL switches on Panel 08 permit 
manual or automatic control of the valves. When a switch is in 
the GPC position, the valves are automatically controlled by the 
GPC during an engine thrusting sequence. The valves are 
controlled manually by placing the switch in the OPEN or 
CLOSE position. Each valve contains a position feedback that is 
sent to the GPC for display on the CRT’s. 

The pressure regulators reduce the helium source pressure to 
the desired working pressure. The regulators are identical to 
those in the OMS pods and operate at the same pressures and in 
the same manner. 

Vapor isolation valves in the oxidizer pressurization lines to 
the oxidizer tanks prevent oxidizer vapor from migrating 
upstream to the pressure regulators. These are the same type 
valves as in the OMS pods and operate in the same manner, 
except they are controlled by the OMS KIT HE PRESS/VAPOR 
ISOL switches on Panel 08. 

The check valve assembly in each parallel path is identical to 
that in the OMS pod and performs and operates the same. 
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The relief valve assembly in each pressurization path is 
identical to those in the OMS Pod. 

The pressure sensor in each helium pressurization line 
upstream of the fuel and oxidizer tanks monitors the regulated 
helium pressure and transmits it to the RCS/OMS PRESS rotary 
switches on panel 03. When the switches are in OMS PRPLNT 
and in OMS FUEL or OXID position, pressure is displayed on the 
RCS/OMS FUEL or OXID meters on Panel 03. If the helium 
pressure is lower than 10,971 mmHg or above 14,697 mmHg 
(212 and 284 psig), the OMS KIT red caution/warning light on 
Panel F7 will illuminate. These pressures also are transmitted for 
display on the CRT. 

Payload Bay Kit Propellant Storage and Distribution 

The propellant storage and distribution system consists of 
one to three fuel tanks and one to three oxidizer tanks. It also 
contains propellant feed, interconnect lines, and isolation valves. 

The propellant supply fuel and oxidizer tanks are identical 
to those in the OMS pods. 

A capacitance gauging system in each propellant tank is 
identical to those in the OMS Pods. 

The propellant from the fuel and oxidizer tanks in the OMS 
payload bay kit is directed to a set (fuel and oxidizer) of parallel 
motor-driven isolation valves. These valves are identical to those 
in the OMS pods. The OMS kit valves can be actuated manually 
or automatically by the TANK ISOLATION A or B switch on 
Panel 08. The OMS KIT TANK ISOLATION A or B valves 
permit propellant flow to the OMS/RCS crossfeed propellant 
lines or isolate the propellant flow. A talkback indicator above 
each switch on Panel 08 indicates the status of that set of valves: 
OP when both valves are open, barber pole when the valve is in 
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transit or one valve is open and one is closed, and CL when both 
valves are closed. 

The OMS propellant crossfeed lines are also connected to 
the aft RCS crossfeed lines to permit propellant from either or 
both OMS pods to flow the aft left and right RCS, 453 kg (1,000 
pounds) per pod of OMS propellant is available for RCS usage. 
In addition, the OMS payload bay kit may supply its 453 kg of 
propellants to the aft left and right RCS. The propellant flow 
from the left and/or right OMS pod are controlled through the 
use of the OMS CROSSFEED switches on Panel 08 and Aft 
LEFT RCS CROSSFEED 1/2, 3/4/5 switches on Panel 08 which 
are described in the RCS section. The OMS payload bay kit 
propellants to the aft RCS are controlled by the OMS KIT TANK 
ISOLATION A and B switches on Panel 08 and the Aft LEFT (or 
RIGHT) RCS CROSSFEED 1/2, 3/4/5 switches. 

The OMS payload bay kit also will have heaters installed to 
prevent the propellant from freezing in the tanks and lines. The 
redundant heater systems A and B on the OMS kit are enabled by 
the OMS KIT AUTO A and B heater switch on Panel A14 and 
controlled automatically by the same type of thermostats that 
are used in the OMS pod heaters. Thermal control of the OMS 
kit is achieved by insulation of propellant lines and walls that 
enclose the OMS kit hardware components and by line- 
wraparound heaters and blanket-type heaters. Temperature sen¬ 
sors located throughout the OMS kit supply temperature 
information to the propellant thermal CRT display and to 
telemetry. 

OMS-RCS INTERCONNECT 

An interconnect between the OMS crossfeed line and the aft 
RCS manifolds provides the capability for operating the aft RCS 
using 453 kilograms (1,000 pounds) per pod of OMS propellant 
for orbital maneuvers. The aft RCS may use OMS propellant 
from either one or both OMS pods in orbit. 



229 





Space Shuttle Spacecraft Systems 



The orbital interconnect sequence is available during orbit 
operations and orbit checkout. 

The flight crew must first configure the following switches 
(using a feed from the left OMS as an example): position the 
Aft LEFT RCS TANK ISOLATION 1/2, 3/4/5A, 3/4/5B and 
AFT RIGHT RCS TANK ISOLATION 1/2, 3/4/5A, 3/4/5B 
switches on Panel 07 to CLOSE position; check that talkback 
indicator above these switches indicates CL; position Aft LEFT 
RCS CROSSFEED 1/2, 3/4/5 and Aft RIGHT RCS 

CROSSFEED 1/2, 3/4/5 switches to OPEN, check that indicators 
show OP; open Left OMS TANK ISOLATION A and B valves 
(Panel 08) and verify talkback indicators show OP; open LEFT 
OMS XFD A and B valves and verify indicators show OP; close 
Right OMS XFD A and B valves and verify indicators show CL, 
and position Left OMS HE PRESS/VAPOR ISOL VALVE A 
switch in GPC position. The left OMS to aft RCS interconnect 
sequence can then be initiated by the item entry on the RCS 
SPEC display. 

The left OMS helium pressure vapor isolation volve A will 
be commanded open when the left OMS tank (ullage) pressure 
decays to 12,213 mmHg (236 psig) and the open commands will 
be terminated 30 seconds later. If the left OMS tank (ullage) 
pressure remains below 12,213 mmHg (236 psia), the sequence 
will set an OMS/RCS valve “mis-compare” flag and will set a 
Class 3 alarm and a CRT fault message. The sequence also will 
enable the OMS to RCS gauging sequence at the same time. 


The flight crew can terminate the sequence and inhibit the 
OMS to RCS gauging sequence by use of the OMS PRESS 
ENA-OFF item entry on the RCS SPEC display. The valves 
can then be reconfigured to their normal position on Panels 07 
and 08. The OMS to aft RCS interconnect sequence is not 
available in the backup flight system (BFS). 


OMS TO RCS GAUGING SEQUENCE 


The OMS to aft RCS propellant quantities are calculated by 
bum time integration. Once each cycle, the accumulated aft RCS 
thruster cycles are used to compute the OMS propellant used 
since initiation of the gauging. The number of RCS thruster 
cycles is provided by the RCS command SOP to account for 
minimum-inpulse firing of the RCS thrusters. The gauging 
sequence is initiated by item entry of the OMS right or OMS left 
interconnect on the RCS SPEC CRT display and is terminated 
by the return to normal item entry. 

The gauging sequence maintains a cumulative total of left 
and right OMS propellant used during OMS to aft RCS 
interconnects, and displays the cumulative totals as percent of 
left and right OMS propellant on the RCS SPEC display. 
The flight crew will be alerted by a Class 3 alarm and a fault 
message when the total quantity used from either OMS pod 
exceeds 354 kg (1000 pounds) or 8.37 percent. 

ABORT CONTROL SEQUENCES 

The abort control sequence is the software that manages, 
among other items, the OMS and aft RCS configuration and 
thrusting periods during ascent aborts to improve performance or 
to consume OMS and aft RCS propellants for center-of-gravity 
control. 

Pre-mission determined parameters are provided for the 
OMS and aft RCS thrusting periods during aborts, since the 
propellant laoding and orbiter center of gravity vary with the 
mission. 

The premission parameters for the abort to orbit (ATO) 
thrusting period are modified during flight based on the vehicle 
velocity at abort initiation. 
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The abort once around (AOA) premission parameters are 
grouped with different values for early or late AOA. 

The return to launch site (RTLS) parameters are contained 
in a single table. 

The abort control sequence is available in OPS (operational 
sequences) 1 and 6, and is initiated at SRB separation if selected 
before then, or at time of selection if after SRB separation. 

ATO-AOA Aborts 

The OMS and aft RCS begin thrusting as soon as an ATO or 
AOA is initiated with one main engine out. 

In some cases of an abort, an OMS to aft RCS interconnect 
is not desired. A parallel aft RCS plus X thrusting period using 
aft RCS propellant and the four aft RCS plus X thrusters will be 
performed with the OMS-1 thrusting period to achieve the 
desired orbit. If a plus X aft RCS thrusting period is required 
before main engine cutoff (MECO), the abort control sequence 
will command the four aft plus X RCS jets on if vehicle 
acceleration is greater than 0.8 g and will monitor the RCS cutoff 
time to terminate the thrusting period. If an RCS propellant 
dump (burn) is required before MECO and vehicle acceleration is 
greater than 1.8 g, the abort control sequence will command an 
eight aft RCS null thrust and monitor the RCS cutoff time to 
terminate the thrusting period. 

In other abort cases, an OMS to aft RCS interconnect is 
desired. This thrusting is performed with the OMS and four aft 
RCS plus X thrusters to consume OMS propellant for orbiter 
center-of-gravity control and the four aft RCS plus X thrusters 
are used to consume OMS propellant. More aft RCS jets can be 
commanded if needed to increase OMS propellant usage, such as 
OMS propellant dump (bum) where 14 aft RCS null jets can be 
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commanded to thrust to improve orbiter center-of-gravity 
location. 

If the amount of OMS propellant used before MECO results 
in less than 28 percent of OMS propellants remaining, a 
15-second aft RCS ullage thrusting period is made after MECO to 
provide a positive OMS propellant feed to start the OMS-1 
thrusting period. 

The OMS to aft RCS interconnect sequence provides for an 
automatic interconnect of the OMS propellant to the aft RCS 
when required and reconfigures the propellant feed from the 
OMS and aft RCS tanks to their normal state after the thrusting 
periods are completed. The interconnect sequence is initiated by 
the abort control sequence. 

In order to establish a known configuration of the valves, 
the interconnect sequence terminates the GPC commands to the 
following valves if they have not been terminated before 
honoring a request from the abort control sequence: left and 
right OMS crossfeed A and B valves, aft RCS crossfeed valves, 
and aft RCS tank isolation valves. 

A request from the abort control sequence for an OMS to 
aft RCS interconnect will sequentially configure the OMS/RCS 
valves as follows; close the left and right aft RCS propellant tank 
isolation valves, open the left and right OMS crossfeed A and B 
valves, and open the left and right aft RCS crossfeed valves. The 
OMS to aft RCS interconnect complete flag is then set to true. 

When the abort control sequence requests a return to 
normal configuration, all affected OMS/RCS propellant valve 
commands are removed to establish a known condition and the 
interconnect sequence will then sequentially configure the valves 
as follows: close aft RCS crossfeed valves, close left and right 
OMS crossfeed valves, open aft RCS prdpellant tank isolation 
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valves. The OMS to aft RCS reconfiguration complete flag is then 
set to false, and the sequence is terminated. 

Return to Launch Site Abort 

An RTLS abort requires OMS propellant dumping by 
burning the OMS propellant through both OMS engines and 
through the 24 aft RCS thrusters to improve abort performance 
and to achieve an acceptable entry orbiter vehicle weight and 
center-of-gravity location. The thrusting period is premission 
determined and depends on the OMS propellant load. 

The OMS engines first start the thrusting sequence and after 
the OMS to aft RCS interconnect is complete, the aft RCS 
thrusters are commanded on. The OMS engines and RCS 
thrusters then continue their bum for a predetermined period. 
The interconnect sequence is the same as mentioned in the 
ATO-AOA aborts. The OMS and aft RCS will begin thrusting at 
SRB staging if the abort is initiated during the first stage of 
flight, or immediately upon abort initiation if during second 
stage. 


Contingency Abort 

A contingency abort is selected automatically at the loss of 
a second main engine or manually by the flight crew using an 
item entry on the RLTS TRAJ (trajectory 2) or RTLS TRANS 
CRT displays. For the contingency aborts the OMS to aft RCS 
interconnect is performed in a modified manner to allow 
continuous flow of propellants to the aft RCS jets for vehicle 
control and to allow contingency rapid dump (bum) of OMS aft 
RCS propellants. The abort control sequence tracks the total 
OMS and aft RCS onptime to determine the amount of 
propellants used. 


The request for an interconnect will cause the interconnect 
sequence to configure the valves sequentially as follows: open the 
aft RCS crossfeed valves, open the left OMS crossfeed valves A, 
open the right OMS crossfeed valves B, close the left and right aft 
RCS tank isolation valves, open the left OMS crossfeed valves B, 
and open the right OMS crossfeed valves A. The OMS to aft RCS 
interconnect complete flag will then be set to true. 

If the rapid dump (burn) is selected before MECO, the OMS 
to aft RCS interconnect occurs and both OMS engines and 24 aft 
RCS jets are commanded to thrust until the desired amount of 
propellant is consumed. The rapid dump (burn) will be inter¬ 
rupted during external tank separation if the thrusting period is 
not completed before MECO; otherwise the thrusting period 
terminates at thrusting time = 0, or if the normal acceleration 
exceeds a threshold value. 

Upon completion of the thrusting period, the OMS to aft 
RCS reconfiguration flag will be set to false and the sequence will 
be terminated. A return to normal configuration request by the 
abort control sequence will cause the interconnect sequence to 
configure the valves sequentially as follows: open aft RCS 
propellant tank isolation valves, close the aft RCS crossfeed 
valves, close the left and right OMS crossfeed A and B valves. The 
OMS to aft RCS interconnect complete flag will be set to false, 
and the sequence will be terminated. 


OMS ENGINE FAULT DETECTION AND 
IDENTIFICATION (FDI) 

The OMS engine FDI is to detect and identify off-nominal 
performance of the OMS engine such as off-failures during OMS 
thrusting periods, on-failures after or before a thrusting period, 
and high or low engine chamber pressures. 
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The OMS engine FDI is performed by the redundancy 
management software, and assumes that the flight crew arms 
only the OMS engines to be used, and that OMS engines which 
are not armed cannot be used for thrusting. The OMS engine FDI 
will be initialized at SRB ignition and terminate after the OMS-1 
thrusting period, or in the case of an RTLS abort, will terminate 
at the transition from RTLS entry to the RTLS landing sequence 
program. The FDI also will be initiated before each OMS burn 
and will be terminated after the OMS thrusting period is 
complete. 

The OMS engine FDI uses both a velocity comparison and a 
chamber pressure (Pc) comparison method to determine a failed 
on or off engine. The velocity comparison is used only after 
MECO, since the OMS thrust is small in comparison to MPS 
thrust before MECO. 

The measured velocity increment is compared to a predeter¬ 
mined one-engine and two-engine acceleration threshold value by 
the redundancy management software to determine the number 
of engines actually firing. This information along with the 
assumption that an armed engine is to be used, allows the 
software to determine if the engine has low thrust or has shut 
down prematurely. 

The Pc comparison test compares a predetermined threshold 
chamber pressure level to the measured Pc to determine a failed 
engine (on, off, or low thrust). 

The engine-on command and the Pc are used before MECO 
to determine a failed engine. The velocity indication and the Pc 
indication are used after MECO to determine a failed engine. If, 
after MECO, the engine fails the chamber pressure test but passes 
the velocity test, the engine will be considered as failed. Such a 
failure would result in illumination of the red RIGHT (or LEFT) 
OMS caution/warning light on Panel F7, the master alarm, and a 
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fault message. In addition, if an engine fails the Pc and velocity 
tests, a down arrow is displayed on the maneuver CRT next to 
the failed engine. 

When the flight crew disarms a failed engine by turning the 
ARM/PRESS switch on Panel C3 to off, a signal is sent to the 
OMS thrusting sequence to shut down the engine and to signal 
guidance to reconfigure. Guidance reconfigures and down-modes 
from two OMS engines to one OMS engine, to four plus X RCS 
jets. 

OMS ACTUATOR FDI 

The OMS actuator FDI detects and identifies off-nominal 
performance of the pitch and yaw gimbal actuators of the OMS 
engines. 

The OMS actuator FDI is divided into two parts. The first 
determines if the actuator should move from its present position. 
If so, the second part determines the amount to be moved and 
whether the desired movement has occurred. 

The first part checks the gimbal deflection error (which is 
the difference between the commanded new position and the last 
known position) of each actuator and determines whether the 
actuator should extend or retract, or if it is being driven against a 
stop. If the actuator is in the desired position, or being driven 
against a stop, the first part of the process will be repeated. 
Should the first part determine that the actuator should move, 
the second part of the actuator FDI process will be performed. 

The second part of the actuator FDI process checks the 
present position of each actuator against its last known position 
to determine whether the actuator has moved more than a 
threshold amount. If the actuator has not moved more than this 
amount, an actuator failure is incremented by one. Each time the 
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actuator subsequently fails this test, the failure is again incre¬ 
mented by one. When the actuator failure counter reaches an 
I-loaded value of four, the actuator is declared failed and a fault 
message output. The actuator failure counter is reset to zero any 
time the actuator passes the threshold test. 


The first and second parts of the actuator FDI continue to 
perform in this manner. The actuator FDI process can detect 
full-off gimbal failures, and full-on failures indirectly. The full-on 
failure is determined when the gimbal actuator servo loop 
determines that the gimbal has extended or retracted too far and 
commands reverse motion. If no motion occurs, the actuator will 
be declared failed. The flight crew response to a failed actuator is 
to select the secondary actuator electronics by item entry on the 
maneuver CRT display. 

The contractors are McDonnell Douglas Astronautics Co., 
St. Louis, MO (OMS pod assembly and integration); Aerojet 
Liquid Rocket Co., Sacramento, CA (OMS engine); Aerojet 
Manufacturing Co., Fullerton, CA (OMS propellant tanks); 


Aircraft Contours, Los Angeles, CA (OMS pod edge member); 
Brunswick-Wintec, El Segundo, CA (OMS propellant tank 
acquisition screen assembly); Consolidated Controls, El Segundo, 
CA (high- and low-pressure solenoid valves and OMS regulators); 
Fairchild Stratos, Manhattan Beach, CA (hypergolic servicing 
couplings); Metal Bellows Co., Chatsworth, CA (alignment 
bellows); Simmonds Precision Instruments, Vergennes, VT (OMS 
propellant gauging system); SSP Products, Burbank, CA (gimbal 
bellows assembly); Tayco Engineering, Long Beach, CA (electri¬ 
cal heaters); AiResearch Manufacturing Co., Torrance, CA 
(gimbal actuators); Futurecraft Corp., City of Industry, CA 
(OMS engine valve components); L.A. Gauge, Sun Valley, CA 
(ball valves); PSM Division of Fansteel, Los Angeles, CA (OMS 
nozzle extension fabrication); Rexnord Inc., Downers Grove, IL 
(OMS engine bearings); Sterer Engineering and Manufacturing, 
Pasadena, CA (OMS engine pressure regulators); Parker-Hannifin, 
Irvine, CA (OMS propellant tank isolation valves, relief valves, 
manifold interconnect valves, and additional delta velocity kit 
valves); Rockwell International, Rocketdyne Division, Canoga 
Park, CA (OMS check valves); Brunswick, Lincoln, NE (OMS 
helium tanks). 
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REACTION CONTROL SYSTEM 


The forward and aft reaction control system (RCS) on the 
orbiter provides the thrust for attitude (rotational) maneuvers 
(pitch, yaw, roll) as well as the thrust for small velocity changes 
along the orbiter axis (translation maneuvers) when the orbiter is 
above 21,336 meters (70,000 feet). 

The reaction control system (RCS) engines are first used in 
the mission after main engine cutoff (MECO) to maintain the 
vehicle in attitude until external tank (ET) separation and to 
provide at external tank separation a minus-Z translational 
maneuver of minus 1.2 meters (4 feet) per second with use of the 


aft RCS pods and forward RCS module. During OMS burns, 
vehicle attitude is maintained by gimbaling the OMS engines. The 
RCS engines will come into operation during a two-OMS-engine 
thrusting period only if the OMS gimbal exceeds gimbal rate or 
gimbal limits. They should not normally come into operation 
during the OMS thrust period. However, during a one-OMS- 
engine thrusting period, roll RCS is required. 

After the OMS-1 thrusting period, the orbiter is in attitude 
hold. The flight crew uses the translation hand control to 
command translational maneuvers to the RCS and to null the 
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residual velocity. Attitude hold is maintained until time to 
maneuver to the OMS-2 bum attitude, which is performed 
manually by the flight crew with the rotational hand controller. 
The RCS plus X jets can be used to complete either the OMS-1 or 
OMS-2 thrusting periods or to perform the OMS-2 thrusting 
period in event of OMS engine failures. In this case, the 
OMS-to-aft-RCS interconnect capability will be used to feed 
OMS propellant to the RCS thrusters. In orbit, after the OMS-2 
thrusting period is complete, RCS maneuvers in attitude or 
translation are performed according to the flight plan. For 
attitude control on orbit, the flight crew can select either 
primary or vernier jets. 


During deorbit, the RCS will nominally be used only to 
maneuver to the OMS thrusting attitude and to null the 
remaining delta velocity. If both OMS engines malfunction, the 
RCS can be used to perform or complete the deorbit maneuver; 
again in this case the OMS-to-aft-RCS interconnect capability will 
be selected to feed OMS propellant to the RCS thrusters. 


Once the deorbit thrusting period is complete, the orbiter is 
maneuvered to the entry interface (El) attitude. The forward 
RCS module is disabled at El. 


From El 121,920 meters (400,000 feet) the orbiter is 
controlled in roll, pitch, and yaw with the aft RCS thrusters. The 
orbiter’s ailerons become effective at a dynamic pressure of 517 
millimeters of mercury (mmHg) per meters squared (10 pounds 
per square foot), and the aft RCS roll jets are deactivated. At a 
dynamic pressure of 1.035 mmHg per meters squared (20 pounds 
per square foot), the orbiter’s elevons become effective, and the 
aft RCS pitch jets are deactivated. The rudder becomes activated 
at Mach 3.5, and the aft RCS yaw jets are deactivated at 13,716 
meters (45,000 feet). 


The RCS is located in three different areas of the orbiter. 
The forward RCS module is in the forward fuselage nose area. 
The aft (right and left) RCS is located in the left and right OMS 
(orbital maneuvering system)/RCS pods, which are attached to 
the.aft fuselage. 

Each RCS consists of high-pressure gaseous helium storage 
tanks, pressure regulation systems, pressure relief valves, a fuel 
and an oxidizer tank, and a propellant distribution system to its 
RCS engines. 

The two helium tanks of each RCS supply gaseous helium 
pressure to the oxidizer and fuel tanks, which supply the oxidizer 
and fuel under pressure to the RCS engines. The propellants are 
nitrogen tetroxide as the oxidizer and monomethyl hydrazine as 
the fuel. The propellants are earth storable and hypergolic (ignite 
upon contact with each other). The propellants of each RCS are 
supplied to its RCS engines, where they ignite (hypergolic), 
producing a hot gas, thus thrust. 

The forward RCS has 14 primary and two vernier RCS 
engines. The aft RCS has 12 primary and two vernier engines in 
each pod. The primary RCS engines provide 3870 Newtons 
(870 pounds) of thrust each, and the vernier RCS engines provide 
106 Newtons (24 pounds) of thrust each. The oxidizer-to-fuel 
ratio for each engine is 1:6. The chamber pressure of the primary 
engines is 7866 millimeters of mercury (152 psia). For each 
vernier engine it is 5692 mmHg (110 psia). 

The primary engines are reusable for a minimum of 
100 missions and capable of sustaining 50,000 starts and 
20,000 seconds of cumulative firing. The primary engines are 
used in a steady-state thrusting mode of one to 150 seconds, with 
a contingency of 500 seconds for the aft RCS engines, as well as 
in a pulse mode with a minimum impulse' thrusting time of 
80 milliseconds (0.080 second). The expansion ratio (exit area to 
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FORWARD REACTION 

CONTROL SYSTEM MODULE Primary Thruster (14) 


38 Primary Thrusters (14 Forward, 12 per Aft Pod) 
Thrust Level = 3,870 Newtons (870 lb) Vacuum 
6 Vernier Thrusters (2 Forward, 4 Aft) 

Thrust Level = 106 Newtons (24 lb) Vacuum 


Propellants: N 204 andMMH 

Forward and Aft RCS Oxidizer 
Tanks: 674 kg (1,488 lb) each 
Forward and Aft RCS Fuel Tanks: 421 kg (930 lb) each 



Oxidizer Tank 


Propellant 
Manifold Valves 


Primary Thrusters 
(12 per Aft Pod) 


Vernier Thrusters 
(2 per Aft Pod) 


Pressurization Components 


Oxidizer Tank 

Reaction Control System 
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Primary Engine 


throat area) of the primary engines ranges from 22:1 to 30:1. 
The primary engines provide the normal control of the orbiter. 


The vernier engines are also reusable for a minimum of 
37 missions and capable of sustaining 500,000 starts and 
125,000 seconds of cumlative firings. The vernier engines are 
used in a steady-state thrusting mode of one to 125 seconds as 
well as in a pulse mode with a minimum impulse time of 
80 milliseconds. The vernier engines are used for finite maneuvers 
and stationkeeping (or long-time attitude hold). The expansion 
ratio of the vernier engine ranges from 20:1 to 50:1. 



Vernier Engine 


PRESSURIZATION SYSTEM 

Each RCS has two helium tanks, isolation valves, pressure 
regulators, relief valves, and lines for draining and filling. 

The helium storage tanks are spherical and of a composite 
construction consisting of a titanium liner with a Kevlar 
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structural overwrap, which increases safety and decreases the 
tank weight over conventional titanium tanks. Each helium tank 
is 475 millimeters (18.71 inches) in diameter with a volume of 
49,866 cubic centimeters (3043 cubic inches). Its dry weight is 
10 kilograms (24 pounds). Each helium tank is serviced to 
186,000 millimeters of mercury (mmHg) (3600 psig). 

The two helium tanks in each RCS supply gaseous helium 
individually, one to the fuel tank and one to the oxidizer tank. 

There are two helium isolation valves in parallel between the 
helium tanks and the pressure regulators in each RCS. The 
helium isolation valves permit the helium source pressure to flow 
to the propellant tank in the open position and isolate the helium 
from the propellant tank in the closed position. The helium 
isolation valves are opened by a solenoid which is momentarily 
energized until the valve is magnetically latched open. To close 
the valve, an electric coil surrounding the magnetic latch is 
energized, allowing spring pressure and helium pressure to force 
the valve closed. 

The helium isolation valves are controlled by the FWD RCS 
He PRESS A/B switches on panel 08 and the AFT LEFT RCS He 
PRESS A/B and AFT RIGHT RCS He PRESS A/B switches on 
panel 07. Each switch controls two helium isolation valves, one 
in the helium oxidizer line and one in the helium fuel line.’The 
switch positions are OPEN, GPC, and CLOSE. Each position is a 
permanent position, but applies only momentary power to the 
solenoid due to the logic in the electrical load controller 
assembly. The GPC position allows the orbiter computer to open 
or close the valve, and the OPEN and CLOSE positions open and 
close the valve respectively. A position microswitch in each valve 
indicates valve position to the controller assembly and controls a 
position indicator (talkback) above each switch on panel 07 and 
08. When both valves (helium fuel and helium oxidizer) are open, 
the talkback indicates OP (open), and when both valves are 
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closed the talkback indicates CL (closed). If one valve is open 
and the other is closed, the talkback indicates barberpole. 


The RCS helium supply pressure can be monitored on panel 
03. The rotary switch on panel 03 positioned to RCS He XI0 
allows the RCS LEFT, RIGHT, and FWD helium pressures to be 
displayed on the RCS/OMS PRESS FUEL AND OXID meters on 
panel 03. 

Helium pressure is regulated by two assemblies, connected 
in parallel, downstream of each helium isolation valve. The 
pressure regulators reduce the helium source pressure to the 
desired working pressure. Each assembly contains two regulators, 
a primary and a secondary, connected in series. If the primary 
regulator fails open, the secondary regulator will regulate the 
pressure. The primary regulates the pressure at 12,523 to 
12,834 mmHg (242 to 248 psig). The secondary one regulates 
the pressure at 13,092 to 13,403 mmHg (253 to 259 psig). 

Two check valve assemblies in a series-parallel arrangement 
are located between the pressure regulator assemblies and relief 
valves. The series arrangement limits the backflow of that 
propellant vapor and maintains propellant tank pressure integrity 
in event of an upstream helium leak. The parallel arrangement 
ensures the flow of helium pressure to the propellant tank if a 
series check valve fails in the closed position. 

The helium pressure relief valve assemblies are located 
between the check valve assemblies and the propellant tanks and 
vent excessive pressure over-board before it reaches the propel¬ 
lant tanks. Each valve consists of a burst diaphragm, filter, and 
relief valve. The diaphragm provides a positive seal against helium 
leakage and will rupture between 16,767 and 17,595 mmHg (324 
to 340 psig). The diaphragm is a non-fragmentation type; 
however, the filter prevents any particles of the burst diaphragm 
from reaching the relief valve seat. The relief valve relieves at 
16,301 mmHg (315 psig) minimum. 
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PROPELLANT SYSTEM 

The propellant system distributes the propellants to the 
RCS thrusters. Each RCS propellant system consists of the fuel 
and oxidizer tanks, fuel and oxidizer tank isolation valves, 
manifold isolation valves, crossfeed valves, and filling, draining, 
and distribution lines. 

Each RCS contains two spherical propellant tanks, one for 
fuel and one for oxidizer. Each propellant tank in the forward 
and aft RCS is constructed of titanium and is 9.9 millimeters 
(0.39 inches) in diameter. 

The nominal full load of the forward RCS tanks is 
670 kilograms (1,477 pounds) in the oxidizer tank and 
421 kilograms (928 pounds) in the fuel tank. The dry weight of 
the forward tanks is 32 kilograms (70.4 pounds). The aft RCS 
tanks are over filled and contain a propellant load of 
738 kilograms (1,627 pounds) in the oxidizer tank and 448 
kilograms (987 pounds) in the fuel tank of each RCS/OMS pod. 
The dry weight of the aft tanks is 35 kilograms (77 pounds). 

Each tank is pressurized with helium, which expels the 
propellant into an internally mounted surface-tension propellant 
acquisition screen. It acquires and delivers the propellant to the 
RCS thrusters on demand. The propellant acquisition device in 
each RCS propellant tank is required because of the orbiter’s 
orientation during boost, on orbit, and entry and because of the 
omni-directional acceleration spectrum, which ranges from very 
high during boost, entry, or abort to very low during orbital 
operation. The forward RCS propellant tanks have propellant 
acquisition devices designed to operate primarily in a low-g 
environment, whereas the aft RCS propellant tanks are designed 
to operate in both the high and low-g environment. The 
propellant acquisition devices ensure propellant and pressurant 
separation during tank operation. 
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A compartmental tank with individual screen devices in 
both the upper and lower compartments supplies propellant 
independant of tank load or orientation. The devices are 
constructed of stainless steel and mounted in the titanium tank 
shells. A titanium barrier separates the upper and lower compart¬ 
ments in each tank, and fine stainless steel screens are used in the 
propellant acquisition devices. 

At orbiter-ET separation and for orbital operations, propel¬ 
lant flows from the upper compartment bulk region into the 
channel network to the upper compartment transfer tube and 
into the lower compartment bulk region. This continues into the 
upper compartment until gas is ingested into the upper compart¬ 
ment device and transferred to the lower compartment. 

The lower compartment of the forward RCS propellant 
tanks would expel propellant to depletion, as in the case of the 
upper compartment; however, orbital operations would be 
terminated with the forward RCS with sufficient propellant 
reserve to preclude gas ingestion to the forward RCS engines and 
achieve a 86-percent expulsion efficiency. 

During launch, the launch acceleration positions the propel¬ 
lant over the propellant tank outlet. If the only flow path to the 
lower compartment were through the upper compartment 
transfer tube, pressure losses due to propellant flow and high-g 
boost acceleration during the return to launch site (RTLS) abort 
condition, which requires the aft RCS, would result in helium gas 
passing directly into the lower compartment early in the 
expulsion of propellant. This would result in excessive consump¬ 
tion of lower compartment propellant, lower compartment 
screen breakdown, and helium gas ingestion directly to the RCS 
engines. To prevent this, a separate subsurface liquid flow path, 
the abort duct, is provided. It permits propellant flow from the 
upper to lower compartment, while hydrostatic pressure is 
utilized to prevent ullage (empty propellant area of tank) gas 


from passing through the transfer tube into the lower 
compartment. 

The aft RCS propellant tank’s lower compartment is not 
used on orbit, but is required for entry. For entry, the aft RCS 
tank propellants are positioned 100 degrees away from the tank 
outlet due to the influence of up to 2.5-g acceleration. As the 
acceleration builds up, the channel screen in the ullage area of 
both the upper and lower compartment devices breaks down and 
ingests gas. During expulsion, the upper compartment propellant 
may flow through both the transfer tube and the abort duct. 
When the bulk propellant uncovers the entrance to the abort 
duct, flow is exclusively through the entry collector to the 
transfer tube. The abort duct screen remains wet during the 
balance of the upper compartment expulsion. As entry expulsion 
continues, propellant is withdrawn from the lower compartment 
until a 90-percent expulsion efficiency is achieved under this 
condition. 

The aft RCS propellant tanks incorporate the abort duct 
and entry collector, sumps, and gas traps to ensure proper 
operation during abort and entry mission phases. Because of 
these components, the aft RCS propellant tanks are approximate¬ 
ly 3.1 kilograms (seven pounds) heavier than the forward RCS 
propellant tanks. The forward RCS is not required during the 
abort and entry phases of the mission and does not incorporate 
these devices. 

The left, forward, and right RCS fuel and oxidizer tank 
ullage pressures can be monitored on panel 03. When the rotary 
switch on panel 03 is positioned to RCS PRPLNT, the left, 
forward, and right RCS propellant tank pressures are displayed 
on the RCS/OMS PRESS FUEL, OXID meters on panel 03. 

The left, forward, and right RCS fuel and oxidizer tank 
ullage pressures will also illuminate the LEFT RCS, FWD RCS, 
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RIGHT RCS red caution/warning respectively if that module 
ullage tank pressure is below 10,350 mmHg (200 psig) or above 
6,146 mmHg (312 psia). 

RCS QUANTITY MONITOR 

The RCS quantity monitor sequence uses the GPC to 
calculate the usable percent of fuel and oxidizer in each RCS 
module (forward, aft left, and aft right). The RCS quantities are 
computed based upon the pressure, volume, and temperature 
method, which requires that pressure and temperature measure¬ 
ments be combined with a unique set of constants to calculate 
the percent remaining in each of the six propellant tanks. 
Correction factors are included for residual tank propellant 
tanks. Correction factors are included for residual tank propel¬ 
lant at depletion, gauging inaccuracy, and trapped line propel¬ 
lant. Thus the computed quantity should represent the usable 
(rather than total) quantity for each module and make it possible 
to determine if the difference between each pair of tanks in a 
module exceeds a preset tolerance (leakage detection). 

The calculations include effects of helium gas compressibil¬ 
ity, helium pressure vessel expansion at high pressure, oxidizer 
vapor pressure as a function of temperature, and oxidizer and 
fuel density as a function of temperature and pressure. The 
sequence assumes that helium that leaves the helium pressure 
vessel flows to the propellant tanks to replace propellant leaving, 
and, as a result, the computed quantity remaining in a propellant 
tank will be decreased by normal usage, propellant leaks, or 
helium leaks. 

The left and right aft RCS and forward RCS module 
quantities are displayed to the flight crew on panel 03. When the 
rotary switch on panel 03 is positioned to RCS FUEL or OXID 
position, the RCS/OMS QTY meters on panel 03 will indicate in 
percent the amount of FUEL or OX for the LEFT, FWD, and 
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RIGHT RCS respectively. If the switch is positioned to RCS 
LOWEST, the gauging system selects whichever is lower (fuel or 
oxidizer) for display on the RCS/OMS QTY, LEFT, FWD, and 
RIGHT RCS respectively. 

The left, right, and forward RCS quantities are also sent to 
the cathode-ray tube (CRT), and, in the event of failures, 
substitution of alternate measurements and the corresponding 
quantity will be displayed on the CRT. If no substitute is 
available, the quantity calculation for that tank is suspended with 
a fault message. 

The sequence also provides automatic closure of the 
high-pressure helium isolation valves on orbit when the propel¬ 
lant tank ullage pressure is above 16,146 mmHg (312 psia) for 
the left, right, or forward RCS, and the caution/warning red light 
on panel F7 is illuminated for the respective FWD RCS, LEFT 
RCS, or RIGHT RCS, and a fault message is sent to the CRT. 
When the tank ullage pressure returns below this limit, the close 
command is removed. 

Exceeding a preset absolute difference of 12.6 percent 
between fuel and oxidizer in a module will illuminate the 
respective LEFT RCS, RIGHT RCS, or FWD RCS red caution/ 
warning light on panel F7, activate the backup caution/warning, 
and cause a fault message to be sent to the CRT. A bias of 12.6 
percent is added when a leak is detected so that subsequent leaks 
in that same module may be detected. 

ENGINE PROPELLANT FEED 

The propellant tank isolation valves are located between the 
propellant tanks and the manifold isolation valves and are used to 
isolate the propellant tanks from the remainder of the propellant 
distribution system. The isolation valves are ac-motor-operated 
and contain a liftoff ball flow control device. One pair of valves 
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Reaction Control System Propellant Manifold Feed System 
to Engines 




(one fuel and one oxidizer valve) isolates the propellant tanks 
from the 1/2 manifold. Two pairs of valves in parallel, identified 
as A, B, isolate the propellant tanks from the 3/4/5 manifold 
lines in the aft RCS. One pair of valves isolates the propellant 
tanks from the 3/4/5 manifold line in the forward RCS. 

The forward RCS tank isolation valves are controlled by the 
FWD RCS TANK ISOLATION 1/2 and 3/4/5 switches on 
panel 08. The aft RCS tank isolation valves are controlled by the 
AFT LEFT RCS TANK ISOLATION 1/2 and 3/4/5 A, B and 
AFT RIGHT RCS TANK ISOLATION 1/2 and 3/4/5 A, B 
switches on panel 07. These are permanent position switches 
OPEN, GPC, and CLOSE, but only apply signals to the electrical 
motor controller assembly, which applies power to the valve 
motor drives. The logic in the motor controller assembly is such 
that once the valve is in the commanded position, power to the 
motor is removed. The OPEN/CLOSE switch positions isolate the 
valves from the computers, and the GPC position permits the 
orbiter computer to open or close the valves. Each valve contains 
a position microswitch that indicates valve position to the motor 
controller assembly and controls a talkback above each switch on 
panel 07 and 08. When both valves, fuel and oxidizer, are open, 
the talkback indicates OP; when closed it indicates CL. The 
talkback indicates barberpole when there is a mismatch in the 
oxidizer and fuel valve position or when the valves are in transit. 

The manifold isolation valves are between the tank isolation 
valves and the RCS engines. The manifold isolation valves isolate 
the propellants from the RCS engines. Manifolds 1, 2, 3, and 4 
supply the propellants to the primary RCS thrusters. Manifold 5 
supplies the propellants to the RCS vernier thrusters. 

The manifold isolation valves in manifolds 1,2, 3, and 4 are 
ac-motor-operated valves and contain the same motor assembly 
switching logic as the tank isolation valves. These valves for the 
forward RCS are controlled by the FWD RCS MANIFOLD 


) 
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ISOLATION 1, 2, 3, 4 switches on panel 08 and for the aft RCS 
are controlled by the AFT LEFT RCS MANIFOLD 1, 2, 3, 4 and 
AFT RIGHT RCS MANIFOLD 1, 2, 3, 4 switches on panel 07. 
The switch positions are OPEN, GPC, and CLOSE. Each switch 
controls a valve pair, one for fuel and one for oxidizer. The 
microswitch talkback functions for these valves are the same as 
those described for the tank isolation valves. 

The functioning and control of the manifold isolation valves 
in manifold 5 are the same as that described for the helium 
isolation valves. These RCS valves operate in pairs, one oxidizer 
and one fuel, and are controlled by the FWD RCS MANIFOLD 
ISOLATION 5 switch on panel 08 and the AFT LEFT RCS 
MANIFOLD ISOLATION 5 and AFT RIGHT RCS MANIFOLD 
ISOLATION 5 switch on panel 07. 

Each RCS engine is identified by the propellant manifold 
that supplies that engine in addition to the direction of that 
engine plume. The first identification is a letter, F, L, or R. It 
designates if it is the forward RCS, left aft RCS, or right aft RCS. 
The second identification is a number, 1 through 5. It designates 
the propellant manifold. The third identification is a letter—A 
(aft), F (forward), L (left), R (right), U (up), D (down)—that 
designates the direction of the engine plume. For example, 
engines F2U, F3U, and F1U are forward RCS engines receiving 
propellants from forward RCS manifold 2, 3, and 1 respectively 
and the engine plume direction is up. 

If either aft RCS pod propellant system must be isolated 
from its RCS jets, the other aft RCS propellant system can be 
configured to crossfeed propellant. The aft RCS crossfeed valves 
which tie the crossfeed manifold into the propellant distribution 
lines below the tank isolation valves can be configured so that 
one aft RCS propellant system can feed both left and right RCS 
pods. The aft RCS crossfeed valves are ac-motor operated, similar 
in design and identical in operation to the tank isolation valves. 


Left-Hand RCS 


Right-Hand RCS 
Pod Not Shown 
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Thruster Location 


Direction of Thruster Plume 


F = Forward Module 
L= Aft Left 

R = Aft Right X 

Propellant Manifold Numbers- 

(1 through 5) 


X 

J i 


A = +X 
F = -X 
L = +Y 
R = -Y 
U = +Z 

D = *Z + Roll 

+ Pitch 
+Z 


\ 


Direction of Thruster Plume 


Direction of Vehicle Motion 
-Rotation Only 


+X -Roll 



Station Coordinates 
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The aft RCS crossfeed valves are controlled by the AFT LEFT 
RCS CROSSFEED 1/2 and 3, 4, 5 and the AFT RIGHT RCS 
CROSSFEED 1/2 and 3, 4, 5 switches on panel 07. The switch 
positions of the four switches is OPEN, GPC, and CLOSE. The 
OPEN position of the AFT LEFT RCS CROSSFEED switch 1/2 
and 3, 4, 5 permits the aft left RCS to supply propellants to aft 
right RCS crossfeed valves, which must be opened by placing the 
AFT RIGHT RCS CROSSFEED switch 1/2 and 3, 4, 5 to the 
OPEN position for propellant flow to the aft right RCS engines. 
(It is noted that the AFT RIGHT RCS TANK ISOLATION A, B 
switches must be in the CLOSE position.) The CLOSE position 
of the AFT LEFT RCS CROSSFEED switch 1/2 and 3, 4, 5 and 
the AFT RIGHT RCS CROSSFEED isolates the crossfeed 
capability. The crossfeed of the aft right RCS to the left RCS 
would be accomplished by positioning the AFT RIGHT and 
LEFT RCS CROSSFEED switches to OPEN and positioning the 
AFT LEFT RCS TANK ISOLATION 1/2 and 3, 4, 5 A, B 
switches to CLOSE. 

The OMS/AFT RCS interconnect is described in the OMS. 
RCS ENGINES 

Each RCS engine contains a fuel and oxidizer injector 
solenoid control valve, injector head assembly, combustion 
chamber, nozzle, and an electrical junction box. 

Each primary RCS engine has one fuel and one oxidizer 
solenoid-operated pilot poppet valve, which are energized open 
by an electrical thrusting command permitting the propellant 
hydraulic pressure to open the main valve poppet to allow the 
propellants to flow through the injector into the combustion 
chamber. There they atomize and ignite (hypergolic) and 
produce a hot gas, thus thrust. When the thrusting command is 
terminated, the valves are deenergized and spring-loaded closed. 


Each vernier RCS engine has one fuel and one oxidizer 
solenoid-operated poppet valve, which are energized open by an 
electrical command. When the on command is terminated, the 
valves are deenergized and spring-loaded closed. 

The primary RCS engine injector head assembly has injector 
holes arranged in two concentric rings. The outer ring is fuel and 
the inner ring oxidizer. They are canted toward each other to 
cause impingement of the hypergolic propellant streams within 
the combustion chamber. Separate outer fuel injector holes 
provide cooling of the combustion chamber walls. 

The vernier RCS engine injector head assembly has a single 
pair of fuel and oxidizer injector holes canted to cause 
impingement of the fuel and oxidizer streams for combustion. 
The fuel stream is more divergent than the oxidizer stream, 
which provides cooling of the combustion chamber walls. 

The combustion chamber of each RCS engine is contructed 
of columbium. The nozzle of each RCS engine is tailored to that 
engine for its structural mated configuration with the forward 
RCS module or the left and right aft RCS pod. The nozzle is 
radiation-cooled, and insulation around the combustion chamber 
and nozzle prevents the excessive heat of 1093 to 1315°C (2000 
to 2400°F) from radiating into the orbiter structure. 

The electrical junction box for each RCS engine contains an 
electrical heater, a Pc (chamber pressure) transducer, a leak 
detection device, and the electrical connections to the propellant 
valves. 

HEATERS 

The RCS electrical heaters prevent the injectors and 
propellants from becoming too cold. Each primary RCS engine 
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contains a 20-watt heater, except the four aft RCS protruding 
engines, which have 30-watt heaters. Each vernier RCS engine has 
a 10-watt heater. The forward RCS module contains six heaters 
mounted on radiation panels in six locations in the module. Each 
aft OMS/RCS pod is also divided into nine heater zones. Each 
zone is heated in parallel by an A and B heater system, and the 
aft RCS thrusting housing contains heaters in the yaw, pitch up, 
pitch down, vernier, and drain purge panels. The OMS/RCS 
HEATERS switches are located on panel A14. 

The forward RCS panel heaters are controlled by the FWD 
RCS AUTO A, B, OFF switch on panel A14. When the FWD 
RCS switch is positioned to AUTO A or B position, a thermostat 
will turn on either the three port side panels or the three 
starboard panels. The thermostats are located on helium lines on 
either side of the forward module. When the temperature of the 
line reaches a minimum of 13°C (55°F), the three respective 
panels are turned on. When it reaches a maximum of 24°C 
(75°F), they are turned off. There is a minimum 3°C (6°F) 
deadband between the maximum and minimum temperatures. 
The OFF position removes all electrical power from the heaters. 

The aft RCS heaters are controlled by the LEFT POD 
AUTO A and AUTO B and RIGHT POD AUTO A and AUTO B 
switches on panel A14. When the LEFT POD AUTO A or AUTO 
B switches are positioned to either AUTO A or AUTO B, 
thermostats will control automatically the nine individual heater 
zones in each pod. Each heater zone is different, but generally 
the thermostats control the temperature between 13°C (55°F) 
minimum to 24°C (75°F) maximum. The OFF position of the 
respective switch removes all electrical power from that pod 
heater system. 

The forward and aft RCS primary and vernier thruster 
heaters are controlled by the FWD RCS JET 1, 2, 3, 4, and 5 
AUTO or OFF and AFT RCS JET 1, 2, 3, 4, and 5 AUTO or 


OFF switches on panel A14. When the FWD or AFT RCS JET 1, 
2, 3, 4, and 5 switches are positioned to AUTO, individual 
thermostats on each thruster will control automatically the 
individual heaters on each thruster. The primary RCS thruster 
heaters will turn on between 19° and 24«C (66° to 760F) and go 
off between 34° and 43OC (94® to 109OF). The vernier RCS 
thruster heaters will turn on between 60° and 660C (140° to 
150°F) and go off between 84° and 90OC (1840 to 1940F). The 
OFF position of the respective switch removes all electrical 
power from that set of thruster heaters. The 1, 2, 3, 4, and 5 
designation refers to propellant manifolds with two to four 
thrusters per manifold. 

RCS JET SELECTION 

The RCS sends pressure, temperature, and valve position 
data to the data processing system (DPS) through the flight 
critical multiplexer/demultiplexers (MDM’s) for processing by 
the orbiter computers. The computers use the data to monitor 
and display the configuration and status of the RCS. The DPS 
provides valve configuration commands to the RCS and RCS jet 
on/off commands to the RCS via the reaction jet drivers (RJD’s), 
aft and forward (RJDA and RJDF) respectively. Data from the 
RCS through the MDM’s are also sent to the pulse code 
modulation master unit (PCMMU) for incorporation in the 
downlink to ground telemetry and to the orbiter onboard 
recorders. 

The RJD’s AND’s the fire commands A and B for an RCS 
jet. If both are true, they send a voltage to open the RCS jet fuel 
and oxidizer solenoid valves. This voltage is used to generate the 
RJD discrete. The fire command A is also sent and used by the 
RCS redundancy management (RM). The RJD’s driver and logic 
power for the aft and forward RJD’s are controlled by the 
RJDA-1A L2/R2 MANF LOGIC and DRIVER, RJDA-2A L4/R4 
MANF LOGIC and DRIVER, and RJDF-IB FI MANF LOGIC 
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and DRIVER ON and OFF switches on panel 014, RJDA-IB 
L1/L5/R1 MANF LOGIC and DRIVER and RJDA-1A F2 MANF 
LOGIC and DRIVER ON and OFF switches on panel 015, and 
RJDA 2B L3/R3/R5 MANF LOGIC and POWER, RJDA-2A-F3 
MANF LOGIC and DRIVER and RJDF-2A F4/F5 MANF 
LOGIC and DRIVER ON and OFF switches on panel 016. 


The RCS RM monitors the RCS jet’s chamber pressure, fuel 
and oxidizer injector temperatures, RJD on/off output discretes, 
jet fire commands, and manifold valve status. 

The DPS software provides status information on any RCS 
errors to the RCS RM software. The errors are referred to as 
communication faults (commfaults). When an RCS error is 
detected by any orbiter computer, the data on the entire chain 
are flagged as invalid (commfaulted) for the applications software 
when present for two consecutive cycles. Commfaults in the RCS 
RM help prevent the redundant orbiter computers from moding 
to dissimilar software, to optimize the number of RCS jets 
available for use, and to prevent the RCS RM from generating 
additional alerts to the flight control operational software 
(FCOS). The RCS RM will reconfigure for commfaults regardless 
of whether the commfault is permanent, transient, or subse¬ 
quently removed. On subsequent transactions, if the problem is 
isolated, only the faulty element is flagged as invalid. 

The RCS jet-failed-on monitor uses the jet fire command A 
discretes, the RJD on/off discretes, the jet RM inhibit discretes, 
and the jet commfault discretes as inputs from each of the 44 
jets. The RCS jet-failed-on logic checks for the presence of a 
RJD-on discrete when no jet fire command A exists. It outputs 
that the RCS jet has failed on if this calculation is true for three 
consecutive cycles during any flight phase. It is noted that the 
consecutive cycles are not affected by commfaults or by cycles in 
which there are fire commands for the affected RCS jet. 
However, the three-consecutive-cycle logic will be reset if the 
non-commanded jet has its RJD output discrete reset to indicate 
the jet is not firing. A jet-failed-on determination sets the 
jet-failed-on discrete (even for a minimum jet fire command pulse 
of 80 milliseconds on and off) and outputs the jet-failed-on to 
the backup C&W light, the yellow RCS JET light on panel F7 
C&W, a fault message on the CRT, and an audible alarm. These 
discretes will be reset when the associated RCS jet RM inhibit 
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discrete is reset by the flight crew. A jet-failed-on will not be 
automatically deselected by the RCS RM, nor will the orbiter 
digital autopilot (DAP) reconfigure the jet selections. 

The RCS jet-failed-off monitor uses the RCS jet fire 
command A discretes, the jet chamber pressure discretes, the 
RCS jet RM inhibit discretes, and the jet commfault discretes as 
inputs from each of the 44 jets. The RCS jet-failed-off logic 
checks for the absence of the jet chamber pressure discretes when 
a jet fire command A discrete exists. It outputs that the RCS jet 
has failed off if true for three consecutive cycles during any 
mission phase after MECO (main engine cutoff). It is noted that 
the consecutive cycles are not affected by the commfaults or by 
cycles in which there are no fire commands for the affected RCS 
jet. However, the three-consecutive-cycle-logic leading to a 
failed-off indication must begin anew, if, before the third 
consecutive cycle is reached, the fire command, and its associated 
chamber pressure, indicates that the RCS jet has fired. A 
jet-failed-off determination sets the jet-failed-off discrete (even 
for a minimum jet fire command pulse of 80 milliseconds on and 
off) and outputs the jet-failed-off indication to the backup C&W 
light, the yellow RCS JET light on panel F7 C&W, a fault 
message on the CRT, and an audible alarm. The RCS jet-failed- 
off monitor will be inhibited for the jet that has failed off until 
the flight crew resets the RM inhibit discrete. The RCS RM will 
automatically deselect a jet that has failed off, and the DAP will 
reconfigure the jet selection accordingly. The RCS RM will 
annunciate a failed-off jet, but not deselect the jet if the jets RM 
inhibit discrete has been set in advance. 

The RCS jet-failed leak monitor uses the RCS jet fuel and 
oxidizer injector temperatures for each of the 44 jets with the 
specified temperature of minus 1.1 °C (30°F) for the primary 
and 54°C (130°F) for the vernier jets and declares the RCS jet 
failed leak if either of the temperatures is less than the specified 
limit for three consecutive cycles. The RCS jet leak monitor logic 
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checks if either the fuel or oxidizer injector temperature is less 
than the specified limit. It outputs the RCS jet leak monitor if 
true for three consecutive cycles leading to the jet failed leak 
detection will begin anew if the fuel and oxidizer temperatures 
are both greater than the specified limits before the jet failed leak 
counter reaches three consecutive cycles. An RCS jet failed leak 
monitor outputs the RCS jet failed leak to the backup C&W 
light, the yellow RCS JET light on panel F7 C&W, a fault 
message on the CRT, and an audible alarm. The RCS jet failed 
leak monitor will be inhibited for the jet that has leak detection 
until the flight crew resets the RCS RM inhibit discrete. The RCS 
RM will automatically deselect a jet declared leaking, and the 
DAP will reconfigure the jet selection accordingly. The RCS RM 
will annunciate a failed leak jet, but not deselect the jet if the 
jet’s RM inhibit discrete has been set in advance. 

The RCS fault jet limit module limits the number of jets 
that can be automatically deselected in response to failures 
detected by RCS RM. The limits are modifiable by the flight 
crew input on the RCS SPEC display (RCS F, L, R jet fail limit). 
This module also reconfigures a jet’s availability status. Auto¬ 
matic deselection of a jet occurs if all the following are satisfied: 
jet detected failed off or leak Qet-on failures do not result in 
automatic deselection), jet select/deselect status is SELECT, jet’s 
manifold status is OPEN, RM is not inhibited for this jet, jet 
failure has not been overridden, and the number of automatic 
deselections of primary jets on that aft RCS pod is less than the 
associated jet fail limit (no limit on vernier jets), which inhibits 
the RCS RM for that pod. A jet’s status can be changed from 
deselect to select only by item entry on the RCS SPEC page. 
Automatic deselection of a jet can be prevented by use of the 
inhibit item entries on the RCS SPEC page. 

The manifold status monitor uses the open and close 
discretes of the oxidizer and fuel manifold isolation valves 
(provided by the motor control assemblies) to determine the 


> 
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open/close status, independent of status changes made by the 
flight crew. The flight crew can override the status of all 
manifolds on an individual basis by item entries on the RCS 
SPEC via the manifold status override discretes. The use of the 
manifold status override feature will not inhibit or modify any of 
the other functions of the manifold status monitor. 


The available jet status table module provides to the flight 
control systems a list of jets available for use. The available jet 
status table uses the manifold open/close discretes from the 
manifold status monitor, and the jet deselect output discretes 
from the jet fault limit module as inputs and outputs the jet 
available discretes and the jet status discrete. The available jet 
status module statuses a jet as available to the flight control 
system if the jet deselect output discretes and the manifold 
open/close discretes indicate select and open respectively. The 
available jet status table will be computed each time the jet status 
change discrete is true. 


The DAP (digital autopilot) jet select module contains 
default logic in certain instances. When the orbiter is mated to 
the ET, roll rate default logic inhibits, roll rotation, and yaw 
commands are normally in the direction of favorable yaw/roll 
coupling. During insertion with open RCS crossfeed, a seven-aft- 
RCS-jet limit applies. If negative Z and plus X translation 
commands are commanded simultaneously, both will be de¬ 
graded. A limit of five aft RCS jets applies on one side during 
insertion with RCS crossfeed closed, and plus X is degraded when 
simultaneous negative Z and plus X and Y translation and yaw 
rotation commands exceed the demand of five aft RCS jets. 
During deorbit, only five aft RCS jets can fire simultaneously 
when the RCS crossfeed is open. If plus X and negative Z 
translation are commanded simultaneously, plus X translation is 
given priority. 


The DAP jet select module determines which aft (right, left, 
or both) RCS jets must be turned on in response to the pitch, 
roll, and yaw jet commands from the entry flight control system. 
The forward RCS jets are not used during entry. After entry 
interface, only the four Y-axis and six Z-axis RCS jets on each aft 
RCS pod are utilized. No X-axis or vernier jets are utilized. The 
DAP sends the discretes which designate which aft RCS jets are 
available for firing (a maximum of four RCS jets per pod may be 
fired) and, during reconfiguration or when the RCS crossfeed 
valves are open, the maximum combined total number of yaw 
jets available during certain pitch and roll maneuvers. 

During ascent or entry, the DAP jet select logic module, 
which is located in the flight control system (FCS), receives both 
RCS rotation and translation commands. By using a table lookup 
technique, the module outputs 38 jet on/off commands to the 
RCS command (CMD) system operating program (SOP), which 
then generates dual fire commands A and B to the individual 
RCS reaction jet drivers (RJD’s) to turn each of the 38 primary 
RCS jets on or off. The fire commands A and B for each of the 
38 primary RCS jets are set equal to the digital autopilot (DAP) 
RCS commands. Commands are issued to the six RCS vernier 
similarly during on orbit. 

The transition digital autopilot (TRANS DAP) becomes 
active immediately after MECO (main engine cutoff) and 
maintains attitude hold in preparation for ET separation. The 
TRANS DAP controls the spacecraft in response to manual 
(CSS-control stick steering) or automatic commands during orbit 
insertion OMS-1 and OMS-2 thrusting periods, orbit coast, orbit 
checkout, deorbit maneuver, and deorbit maneuver coast. These 
commands are converted to OMS engine deflections (thrust 
vector control) during the two OMS insertion thrusting periods 
and RCS jet firings during the entire insertion phase. RCS 
commands are issued to support OMS rotations (roll control) 
when only one OMS engine is utilized, or for rotation, attitude 
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hold, or translation when the OMS engines are not thrusting. The 
TRANS DAP utilizes attitude feedback and velocity increments 
from the inertial measurement units (IMU’s) via the attitude 
processor. This feedback information allows the TRANS DAP to 
operate as a closed loop system for pointing and rotation but not 
for translation. 

The on-orbit DAP and RCS command orbit SOP generates 
the dual fire commands to the individual RCS jets in response to 
commands from the flight control system during orbit operations 
and orbit checkout and set the fire A and fire B commands for 
each jet equal to the no-orbit DAP RCS commands. The fire A 
commands are also sent to redundancy management. There are 
automatic or manual (CSS) rotation modes, manual translation, 
and primary or vernier (rotation only) RCS capabilities on orbit. 

The automatic or guided rotation commands are supplied 
by the universal pointing processor, and manual (CSS) rotation 
or translation commands are supplied by the RHC’s (rotation 
hand control) or THC’s (translation hand control) respectively. 
Crew commands from the flight deck forward or aft station are 
accepted. Three selectable manual (CSS) rotation modes and two 
selectable translation modes (for X, Y, and Z translations) are 
provided. The capability to select nose (forward RCS) or tail (aft 
RCS) only for pitch and/or yaw control is provided by the 
primary jets. Primary jet roll control is provided only by the aft 
RCS jets. 

The vernier jets are used for tight attitude deadbands and 
fuel conservation. The loss of one vernier jet results in the loss of 
the entire vernier mode. 

The on-orbit DAP has two sets of I-loaded (initialized) 
deadbands, DAP A and DAP B. DAP A has a wide deadband and 
is used for maneuvers that do not require accurate pointing. DAP 




B has a narrow deadband and is used for maneuvers that require 
accurate pointing, such as IMU alignment. 

The entry/landing RCS command SOP generates the dual 
fire commands to the individual RCS thrusters in response to 
commands from the flight control system during entry guidance 
and terminal area energy management and approach/landing and 
sets the fire A and fire B commands equal to the aerojet DAP 
commands or the return to launch site abort DAP commands, 
depending upon which is selected by the flight control system. 
These commands are sent to the 20 aft RCS Y and Z jets. The 
fire A commands are also sent to redundancy management. 

The aerojet DAP is a set of general equations used to 
develop effector commands that will control and stabilize the 
orbiter during its descent to landing from orbital attitude. The 
aerojet DAP resides in the entry OPS, but is used only during 
entry and terminal area energy management and approach and 
landing. 

This is accomplished by using either manual (CSS) com¬ 
mands or automatic commands as inputs to the equations. The 
solution of these equations results in fire commands to the 
available RCS jets and/or appropriate orbiter aerosurfaces. 

The on-orbit and TRANS DAP are also rate command 
control systems. Sensed body rate feedback is employed for 
stability augmentation in all three axes. This basic rate system is 
retained in a complex network of equations whose principal 
terms are constantly changing to provide the necessary vehicle 
stability while ensuring that sufficient maneuver capability exists 
to follow the planned trajectory. 

For exoatmosphere flight or flight during the trajectory 
where certain control surface are rendered ineffective by adverse 
aerodynamics, a combination of aft RCS jet commands and 
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aerosurface commands is issued. For conventional vehicle flight 
in the atmosphere, the solution of equations results in deflection 
commands to the elevons (elevator/aileron), rudder, speedbrake, 
and body flap. Inputs can consist of automatic commands from 
entry guidance in the form of attitude, angle of attack, surface 
position, acceleration commands and manual (CSS) roll, pitch, 
and yaw rate commands from the flight-crew-operated con¬ 
trollers or a combination of the two since the software channels 
may be moded independently. 

The RCS activity light processing sequence performs the 
processing necessary to drive the roll, pitch, and yaw indicators 
lights on panels F6 and A8 to indicated the presence of an RCS 
command during entry and terminal area energy management 
and approach/landing. The indicators are L, R, for roll and yaw 
left or right, and U, D, for pitch up and down. The RCS 
commands are stretched by this sequence to provide increased 
visibility of the indicator lights. Their primary function is to 
indicate when more than two yaw jets are commanded and when 
the elevon drive rate is saturated. 

From entry interface until the dynamic pressure is greater 
than 517 millimeters of mercury (mmHg) per meters squared 
(10 pounds per square foot), the ROLL L (left) and R (roll) 
lights indicate that left or right roll commands have been issued 
by the DAP. The minimum light-on duration is extended to allow 
the light to be seen even for a minimum impulse firings. When 
dynamic pressure of 517 mmHg per meters squared (10 pounds 
per square foot) has been sensed, neither ROLL light will 
illuminate until 2,587 mmHg per meters squared (50 pounds per 
square foot) has been sensed and two RCS yaw jets are 
commanded on. 

The pitch (U,D) lights indicate up and down pitch jet 
commands until a dynamic pressure of 1,035 mmHg per meters 
squared (20 pounds per square foot) is sensed, after which the 



pitch jets are no longer used. When 2,587 mmHg per meters 
squared (50 pounds per square foot) is sensed, the PITCH lights 
assume a new function like the ROLL lights. Both PITCH lights 
will illuminate whenever the elevon surface drive rate exceeds 20 
degrees per second (10 degrees per second if only one hydraulics 
system is remaining). 

The yaw (L and R) lights will function as yaw jet command 
indicators throughout entry until the yaw jets are disabled at 
13,716 meters (45,000 feet). The yaw lights have no other 
function. 

The forward RCS and aft (left and right) OMS/RCS pods 
are removable units to facilitate orbiter turnaround and reusable 
for a minimum of 100 missions, if required. 

The contractors are McDonnell Douglas Astronautics Co., 
St. Louis, MO (OMS/RCS pod assembly and integration); CCI 
Corp., Marquardt Co. Division, Van Nuys, CA (primary and 
vernier thrusters); Brunswick, Lincoln, NE (RCS helium tanks), 
Consolidated Controls, El Segundo, CA (RCS high-pressure 
helium valves and low-pressure vernier engine manifold valves, 
dc); Cox and Co., New York, NY (RCS electrical heaters); 
Fairchild Stratos, Manhattan Beach, CA (forward and aft RCS 
helium pressure regulators, couplings nitrogen tetroxide/ 
monomethyl hydrazine, helium fill disconnects); Honeywell, 
Inc., St. Petersburg, FL (forward and aft RCS reaction jet 
drivers); Martin Marietta, Denver, CO (forward and aft RCS 
propellant tanks); Metal Bellows Co., Chatsworth, CA (RCS 
flexible line assembly); Parker-Hannifin, Irvine, CA (ac motor- 
operated manifold valves, RCS crossfeed valves, interconnect 
valves payload, delta velocity kit valve and relief valves, 
hypergolic couplings, manually operated OMS/RCS valves), 
Rockwell International, Rocketdyne Division, Canoga Park, CA 
(RCS check valves); Brunswick-Wintec, Los Angeles, CA (filters). 
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ELECTRICAL POWER SYSTEM 


The electrical power system (EPS) consists of three 
subsystems: power reactant storage and distribution (PRSD), fuel 
cell power plants (FCP) (the electrical power generation), and 
electrical power distribution and control (EPDC). 

The PRSD subsystem stores and supplies the reactants 
(hydrogen and oxygen) to the three fuel cell power plants, which 
generate the electrical power during all mission phases; in 
addition, oxygen is supplied to the environmental control and 
life support system (ECLSS) for crew cabin pressurization. The 
hydrogen and oxygen are stored in their respective storage tanks 
at cryogenic temperatures and supercritical pressures. The EPDC 
subsystem distributes the fuel cell power plant direct current and 
converts direct current to alternating current and distributes 
alternating current to all Space Shuttle electrical equipment 
throughout all mission phases. 

The three fuel cell power plants, through a chemical 
reaction, generate all of the 28-volt dc electrical power for the 
Space Shuttle after launch. Electrical power before launch is 
supplied in conjunction with ground support equipment at the 
launch pad. Each of the three fuel cell power plants consists of a 
power section, where the chemical reaction occurs, and a 
compact accessory section attached to the power section, which 
controls and monitors the power section performance. The three 
fuel cell power plants are individually coupled to the reactant 
(hydrogen and oxygen) distribution subsystem, the heat rejection 
subsystem the potable water storage subsystem, and the EPDC 
subsystem. The fuel cell power plants generate heat and water as 
a byproduct. The heat is directed to fuel cell heat exchangers, 
where excess heat is rejected to the Freon coolant loops. The 
water is directed to the potable water storage subsystem. 



PRSD Interfaces 


The dc power generated by the fuel cells is routed to a 
three-bus system that distributes dc power to the forward, mid, 
and aft orbiter sections for equipment in these areas. The three 
main dc buses-MN (main) A, MNB, and MNC~are the prime 
source of power for the orbiter’s dc loads. Each of the three dc 
main buses supplies power to three solid (static), single-phase 
inverters, which constitute one inverter system; thus, the nine 
inverters convert dc power to ac power for distribution to three 
ac buses, AC1, AC2, and AC3. They are the source power for 
the orbiter’s ac loads. 
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Fuel Cell Powerplant 


The EPDC subsystem controls and distributes electrical 
power (ac and dc) to the orbiter subsystems, the solid-rocket 
boosters, the external tank, and payloads. Power distribution is 
controlled and distributed by assemblies. Each assembly is a 
storage area or box for electrical components such as remote 
switching devices, buses, resistors, diodes, and fuses. Each 
assembly usually contains a power bus or buses and remote 
switching devices for distributing bus power to subsystems 
located in its area. 

POWER REACTANT STORAGE AND DISTRIBUTION 
(PRSDS) 

Hydrogen and oxygen are stored in a supercritical condition 
in double-walled, thermally insulated, spherical tanks with a 


vacuum annulus between the inner pressure vessel and outer shell 
of the tank. Each tank has multi-layer thermal insulation and 
heaters to add energy to the reactants during depletion for 
pressure control. Each tank has capacitance quantity sensing 
capability for measuring quantity remaining. 

The hydrogen and oxygen tanks are grouped in sets 
consisting of one hydrogen and one oxygen tank. Initial 
development test flight consisted of two-tank sets (hydrogen and 
oxygen tanks one and two); the second development flight test 
had three-tank sets (hydrogen and oxygen tanks one, two, and 
three); and the third and subsequent flights will have four-tank 
sets (hydrogen and oxygen tanks one, two, three and four). The 
four-tank sets provide seven-day mission capability. Up to five 
tank sets can be installed. The five tank sets are all located in the 
mid fuselage under the payload bay area. In the operational flights 
additional tank sets can be installed in the payload bay area. 

The four identical oxygen tanks consist of inner pressure 
vessels of Inconel 718 and outer shells of aluminum 2219. The 
inner vessel is 849 millimeters (33.435 inches) in diameter and 
the outer shell is 934 millimeters (36.8 inches) in diameter. Each 
tank has a volume of 0.317 cubic meter (11.2 cubic feet) and 
stores 354 kilograms (781 pounds). Dry weight of each tank is 
91 kilograms (201 pounds). The initial temperature of the stored 
oxygen is minus 176° (minus 185°F). Maximum fill time is 
45 minutes. 


The four hydrogen tanks also are identical. Both the inner 
pressure vessel and the outer shell are constructed of alumi¬ 
num 2219. The inner vessel’s diameter is 1054.5 millimeters 
(41.516 inches) and the outer shell is 1155.7 millimeters (45.5 
inches). The volume of each tank is 0.605 cubic meter (21.39 
cubic feet) and each stores 41 kilograms (92 pounds). Each tank 
weighs 98 kilograms (216 pounds) dry. The initial storage 
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temperature is minus 251°C (420°F). Maximum fill time is 
45 minutes. 

The inner pressure vessels are kept super-cold by minimizing 
conductive, convective, and radiant heat transfer. Twelve low- 
conductive supports suspend the inner vessel within the outer 
shell. Radiant heat transfer is reduced by a shield between the 
inner vessel and outer shell, and convective heat transfer is 
minimized by maintaining a vacuum between the vessel and shell. 
A vac-ion pump, powered by GSE during ground servicing 
operations, maintains the required vacuum level. 

Each hydrogen tank has one heater probe with two 
elements, while each oxygen tank has two heater probes with 
two elements on each probe. As the reactants are depleted, the 
heaters add heat energy to maintain a constant pressure in the 
tank. The heaters operate in manual and automatic modes. The 
oxygen tank (02 TK) and hydrogen tank (H 2 TK) switches 
(AUTO, ON, OFF) for tanks 1-3 are located on panel Rl; 
switches for the O 2 and H 2 tank 4 heaters are on panel All. 
When a heater switch is positioned to AUTO, the heater is 
controlled by a tank heater controller. Each heater controller 
receives a signal from a tank presssure sensor. If pressure in a 
tank is equal to or below a specific pressure and the controller 
sends a “low pressure” signal to the heater logic and the heater is 
powered on, the pressure bands are: 10,340 to 10,650 mm of 
mercury (mmHg) (200 to 206 psia); H 2 tanks 3 and 4—11,219 to 
11,529 minHg (217 to 223 psia); O 2 tanks 1 and 2—41,618 to 
42,239 mmHg, (805 to 817 psia); and O 2 tanks 3 and 4—43,118 
to 43,738 mmHg (834 to 846 psia). When H 2 tanks 1 and 2 
pressure is 11,374 to 11,684 mmHg (220 to 226 psia), H 2 tanks 
3 and 4 12,253 to 12,563 mmHg (237 to 243 psia), O 2 tanks 1 
and 2 43,423 to 44,048 mmHg (840 to 852 psia), and O 2 tanks 
3 and 4 44,927 to 45,548 mmHg (869 to 881 psia), the 
respective controller sends a “high pressure” signal to the heater 
logic and the heater involved is shut off. 


A dual mode heater operation capability is available for 
pairs of O 2 and H 2 tanks. If the heaters of both Tanks 1 and 2 
or Tanks 3 and 4 are selected to the AUTO mode, the tank 
heater logic is interconnected. In this case, the heater controllers 
of both tanks must send a low pressure signal to the heater logic 
before the heaters will turn on. Once the heaters are on, a high 
pressure signal from either tank will turn off the heaters in both 
tanks. 

In the manual mode, the flight crew controls the heaters by 
using the ON/OFF positions for each heater switch on panel Rl. 
High or low pressure in each tank is shown on the CRT display or 
the Cryo O 2 , H 2 PRESS gauge on Panel 02; the specific tank is 
selected through a rotary switch (S2) on Panel 02. 

In the initial development flight test, the O 2 and H 2 heater 
switches are in the OFF position during ascent to conserve 
electrical power. After orbital maneuvering system (OMS)-l 
thrusting, the heater switches are positioned to AUTO for the 
remainder of the mission. When the third and fourth O 2 and H 2 
tank sets are added for later flights, all heaters will be off for 
ascent and all will be set to AUTO after thrusting. Because 
heater controller pressure limits are set at a higher level for Tanks 
3 and 4 than for Tanks 1 and 2, the former will be the preferred 
supply of reactants to the fuel cells. For descent, Tanks 3 and 4 
are OFF and Tanks 1 and 2 supply reactants to the fuel cells. 

The CRYO O 2 HTR ASSY TEMP meter on Panel 02, in 
conjunction with a rotary switch (SI) to select one of the two 
heaters in each tank, permits temperatures of the heater element 
to be displayed. The range of the display is from minus 425° F 
to plus 475°F. The temperature sensor in each heater also is 
hardwired directly to the yellow O 2 HEATER TEMP C/W light 
on Panel F7. This light will illuminate if the temperature is at or 
above 349° F. A signal also is sent to the computers, where 
software checks the limit and, if at or above 349°F, the BACKUP 
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heater controllers to turn on the heaters 
in both tanks. When the pressure in either 
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detectors can trip out power to the heaters. 
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H 2 Manifold 


When both Tank 1 and 2 heater switches 
are in the auto position, a low pressure 
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heater controllers to turn on the heaters 
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tank reaches the high pressure range and 
the low pressure signal ceases, the heaters 
in Tanks 1 and 2 turn off. Tanks 3 and 4 
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C/W light on Panel F7 illuminates. This signal also is transmitted 
to the CRT and telemetry. 

Two current level detectors are built into each 02 tank 
heater to prevent electrical shorts. The second detector is 
redundant. Each detector is divided into A and B detectors, one 
measuring heater A current and the other measuring heater B 
current. The detectors are powered by circuit breakers on Panels 
014, 015, 016, and ML86B and are identified asCRYO O 2 HTR 
TK 1, 2, 3, 4 Snsr (sensor) 1,2. Each detector measures the 
current in and out of a heater and if the current difference is 0.9 
amps or greater for 1.5 milliseconds, a trip signal is sent to the 
heater logic to remove power from the heaters, regardless of the 
heater switch position. If one element of a heater causes a 
“trip-out,” power to both elements are removed. An “O 2 TK 
HEATERS 1, 2, 3/TEST/RESET” switch on Panel R1 and on 
Panel A11 for TK-HEATER 4 can be used to reapply power to 
that heater when positioned to RESET. The TEST position 
will cause a 1.4 amp delta current to flow through all four 
detectors of a specified O 2 tank, causing them to trip-out. 
During 011 -orbit operations, the flight crew will be alerted to a 
current level detector “try-out” by an SM ALERT on Panel F7 
and on the CRT. 

Each O 2 and H 2 tank has a quantity sensor powered by a 
circuit breaker. These are identified on Panel 013 as CRYO QTY 
O 2 (or H 2 ) TK1 and TK2 and on Panel ML86B as CRYO QTY 
O 2 (or H 2 ) TK3 and TK4. Data from the quantity sensors is 
sent to Panel 02, where a rotary switch (S2) is used to select the 
tank for display on the CRYO O 2 (or H 2 ) QTY meters. The 
range of the meters is 0 to 100. The data also is sent to the CRT. 

There are two tank pressure sensors for each O 2 and H 2 
tank. One sensor transmits its data to the tank heater controllers 
and to the yellow O 2 (or H 2 ) PRESS C/W lights on Panel F7, 
which illuminate if O 2 tank pressure is below 27,945 mmHg 


(540 psia) or above 50,973 mmHg (985 psia) or if H 2 tank 
pressure is below 7917 mmHg (153 psia) or above 15,204 mmHg 
(293.8 psia). The signal also is transmitted to the CRT and 
on Panel 02 (S2) used to select the tank for display on the CRYO 
O 2 (or H 2 ) PRESS meter. The data also goes to the SM ALERT, 
BACKUP C/W on Panel F7 and to telemetry. The range of the 
O 2 meter is 0 to 1200 psia, and of the O 2 meter is 0 to 400 psia. 


The O 2 and H 2 fluid temperature sensors transmit data to 
the CRT and telemetry. 

Each tank set (one hydrogen and one oxygen tank) has a 
hydrogen/oxygen control box that contains the electrical logic 
for the hydrogen and oxygen heaters and controllers. The control 
box is located on coldplates in the mid body under the payload 
bay envelope. 

The reactants from the tanks flow through two relief 
valve/filter package modules and valve modules, then to the fuel 
cells through a common manifold. Oxygen is supplied to the 
manifold from the tank at a pressure of 42,176 to 45,591 mmHg 
(815 to 881 psia) and hydrogen is supplied at a pressure of 
10,350 to 12,575 mmHg (200 to 243 psia). The pressure of the 
reactants will be essentially the same at the fuel cell interface as 
it is in the tanks, since only a small pressure decrease occurs in 
the manifolds. 

After leaving the tank, the reactants first flow through a 
relief valve/filter package module which contains the tank relief 
valve and a 12-micron filter. The filter removes reactant 
impurities that could degrade the fuel cell. The valve relieves 
excessive pressure that builds up in the tank and a manifold valve 
relieves pressure in the manifold lines. The O 2 tank relief valve 
relieves at 52,008 mmHg (1005 psia) and the H 2 tank relief valve 
relieves at 16,042 mmHg (310 psia). 



J 


260 







'-0 Umbilical 


Cryo/Fuel Cell Interface 












































































































































































































Space Shuttle Spacecraft Systems 



The reactants then flow through the valve modules. There 
are four of these: H 2 valve modules 1 and 2 and Cb valve 
modules 1 and 2. Each module contains a check valve for each 
tank line coming in, a manifold valve, and fuel cell reactant 
valves. The O 2 valve modules also contain the ECLSS atmos¬ 
pheric pressure control Cb system 1 and 2 supply valves. All 
manifold valves and fuel cell reactant valves will normally be 
open during all mission phases. These valves are controlled by the 
flight crew through switches with talkbacks located on Panel R1. 
The check valve in each tank line prevents reactants from flowing 
from one tank to another in the event of a tank leak, which 
prevents a total loss of reactants. The fuel cell reactant valves 
allow reactants to flow into the fuel cells from the manifold or 
isolate the reactants from the fuel cell. The manifold valve 
isolates one reactant system but allows reactants from the 
remaining supply system to flow to two fuel cells. 

The FUEL CELL REAC 1, 2, 3, OPEN/CLOSE switches 
and indicators are located on Panel Rl. When the switch is 
positioned to OPEN, the respective H 2 and O 2 reactant valves are 
opened, allowing reactants to flow from the manifold into the 
fuel cell. The corresponding talkback indicators O 2 , H 2 would 
indicate OP (open). When the switch is positioned to CLOSE, 
the corresponding H 2 and O 2 reactant valves are closed, isolating 
the reactants from the fuel cell and the corresponding talkback 
indicator would indicate CL (closed). Because it is critical to 
have reactants available at the fuel cells, the red FUEL CELL 
REAC light on Panel F7 would illuminate when any fuel cell 
reactant valve is closed, a C/W tone is sounded and the computer 
senses the closed valve and illuminates the BACKUP C/W light 
on Panel F7 and the SM ALERT and displays the data on the 
CRT. This alerts the flight crew that the fuel cell will be inoper¬ 
ative within approximately 20 seconds for an H 2 valve closure 
and 130 seconds for an O 2 valve closure. 


The H 2 (or O 2 ) MANIFOLD TK1, 2 OPEN/CLOSE 
switches and indicators are located on Panel Rl. When the 
switch is positioned to OPEN, the respective H 2 or O 2 manifold 
valve is opened, allowing reactant to flow from the manifold to 
the fuel cell reactant valve. The corresponding indicator would 
indicate OP. When the switch is positioned to CLOSE, the valve 
is closed, isolating reactant from the fuel cell reactant valve, and 
the indicator indicates CL. The closure of an 02 or H 2 manifold 
valve isolates one reactant supply system to flow to two fuel 
cells and may also be used to isolate a malfunctioning fuel cell. 

The manifold relief valves are a built-in safety device in the 
event a manifold valve and a fuel cell reactant valve are closed 
because of a malfunction. The reactants trapped in the manifold 
lines would be warmed up by the internal heat of the orbiter and 
overpressurize. The manifold relief valve will open at 
15,007 mmHg (290 psi) for H 2 and 50,456 mmHg (975 psi) for 
O 2 to relieve pressure and allow the trapped reactants to flow 
back to their tanks. Both H 2 and O 2 manifold valves should 
never be closed at the same time because their is no provisions 
for relieving trapped reactants in the line between the two 
manifold valves. If both were closed, the pressure would build up 
very quickly and cause the line to rupture. 

Two pressure sensors located in both the H 2 and Cb valve 
modules transmit data to the CRT. This data is also sent to the 
systems management computer where its lower limit is checked 
and, if the H? and O 2 manifold pressures are below 7762 mmHg 
(150 psia) and 10,350 mmHg (200 psia), respectively, an SM 
ALERT will occur. 

During preflight ground operations, the fuel cells are 
supplied by GSE reactants until approximately T minus 2 
minutes, 35 seconds. The GSE supply pressure is 15,525 to 
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16,560 mmHg (300 to 320 psia) for H 2 and 51,750 to 
52,785 mmHG (1000 to 1020 psia) for O 2 , which is higher than 
the onboard orbiter power reactant storage distribution system. 
The GSE supply valves close automatically to transfer to internal 
reactants. 

The fuel cells operate on only 453 kilograms (1,000 pounds) 
of hydrogen and oxygen and produces about 473 liters (125 gal¬ 
lons) of water in a three day mission. In a seven day mission, the 
fuel cells operate on 1,134 kilograms (2,500 pounds) of 
hydrogen and oxygen and produce about 1135 liters (300 gallons) 
of water at 19 kilowatts including payload. 

The three fuel cells operate as independent electrical power 
sources, each supplying its own isolated, simultaneously 
operating, 28-volt dc bus. The fuel cell consists of a power 
section, where the chemical reaction occurs, and an accessory 
section, which controls and monitors the power section 
performance. The power section, where hydrogen and oxygen are 
transformed into electrical power, water, and heat, consists of 62 
small cells contained in two substacks. Manifolds run the length 
of these substacks and distribute hydrogen, oxygen, and coolant 
to the cells. The cells contain electrolyte consisting of potassium 
hydroxide (KOH) and water, an oxygen electrode (cathode) and 
a hydrogen electrode (anode). 

Hydrogen is routed to the cell’s hydrogen electrode, where 
it reacts with hydroxyl ions in the electrolyte. This electro¬ 
chemical reaction produces electrons (electrical power), water, 
and heat with the electrons being routed through the orbiter’s 
EPDC subsystem to perform electrical work. Oxygen is routed to 
the cell’s oxygen electrode, where it reacts with the water and 
returning electrons to produce hydroxyl ions. The hydroxyl ions 
then migrate to the hydrogen electrode, where they enter into 
the hydrogen reaction at that electrode. The oxygen and 


hydrogen are reacted (consumed) in proportion to the orbiter’s 
electrical power demand. 


Excess water vapor is removed by an internal hydrogen 
system. Hydrogen and water vapor from the reactants exits the 
cell stack, is mixed with replenishing hydrogen from the storage 
and distribution system, and enters a condensor, where waste 
heat from the hydrogen and water vapor is transferred to the fuel 
cell coolant system. The resultant temperature decrease 
condenses some of the water vapor to water droplets. A 
centrifugal water separator extracts the liquid water and 
pressure-feeds it to potable tanks in the lower deck of the 
pressurized crew cabin. Water from the potable water storage 
tanks can be used for crew consumption and cooling of the 
Freon-21 coolant loops. The remaining circulating hydrogen is 
directed back to the fuel cell stack. 

FUEL CELL POWER PLANTS 

Each of the three fuel cell power plants is reusable and 
restartable. The cells are located under the payload bay area in 
the forward portion of the orbiter mid fuselage. 

The accessory section monitors the reactant flow, removes 
waste heat and water from the chemical reaction, and controls 
the temperature of the stack. The accessory section consists of 
the H 2 and O 2 flow system, the coolant loop, and the electrical 
control unit (ECU). 

The fuel cell coolant system circulates a liquid fluorinated 
hydrocarbon (FC-40) and transfers the waste heat from the cell 
stack through the fuel cell heat exchanger of that fuel cell power 
plant to the Freon-21 coolant loop system in the mid fuselage. 
Internal control of the circulating fluid maintains the cell stack at 
a normal operating temperature of approximately 93°C (200°F). 
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These Parameters Appear on CRT and are 
Sent to SM Alert Program: 

O2 Flow Rate 
5 ) H2 Flow Rate 
FC*Voltage 
FC Current 

Stack Coolant Outlet Temperature 
Condenser Exit Temperature 
Coolant Return Temperature 
Coolant Pressure 
Coolant Pump Status 
H2O Condition 


Fuel Cell 1 - Typical 
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After the reactants enter the fuel cells, they flow through a 
preheater (where they are warmed) from cryogenic temperature 
to 4.4°C (40°F) or greater, a 5-micron filter, and a two-stage 
integrated dual gas module. The first stage of the regulator 
reduces both the H 2 and O 2 pressure to 6,986 to 7,762 mmHg 
(135 to 150 psia). The second stage of the regulator reduces the 
O 2 to a range of 3,208 to 3,363 mmHg (62 to 65 psia) and 
maintains the H 2 pressure at 232 to 310 mmHg (4.5 to 6.0 psia) 
differential below the O 2 pressure. The regulated O 2 lines are 
connected to the accumulator which maintains an equalized 
pressure between the O 2 and the fuel cell coolant. If the O 2 and 
H 2 pressure decreases, the coolant pressure is also decreased to 
prevent a large differential pressure inside the stack that would 
crack the thin walls of the fuel cell. 

The incoming H 2 upon leaving the dual gas regulator 
module mixes with the hydrogen-water vapor exhaust from the 
fuel cell stack. This gas mixture is routed through a condensor 
where the temperature of the mixture is reduced below the 
boiling point of water, condensing the water. The liquid water is 
then separated from the hydrogen-water mixture by the H 2 
pump/H 20 separator. 

The H 2 pump circulates the H 2 gas back to the fuel cell 
stack, where some of the H 2 is consumed in the reaction, while 
the remainder flows through the fuel cell stack, removing the 
product water by evaporation from the fuel cell. The hydrogen- 
water vapor mixture then combines with the regulated H 2 from 
the dual gas generator module and the loop is started over. 

The O 2 from the dual gas regulator module flows directly 
through two ports into a closed-end manifold in the fuel cell 
stack, achieving optimum oxygen distribution in the cells. All 
oxygen that flows into the stack is consumed, except during 
purge operations. 


Reactant consumption is directly related to the current 
produced; if there are no internal or external loads on the fuel 
cell, no reactants will be used. Because of this direct proportion, 
leaks may be detected by comparing reactant consumption and 
current produced; an appreciable amount of excess reactants 
used indicates a probable leak. 

Water and electricity are the products of the chemical 
reaction of oxygen and hydrogen that takes place in the fuel 
cells. The water must be removed or the stacks will become 
saturated with water, decreasing reaction efficiency. With an 
operating load of about 7 kilowatts, it takes about 7 to 8 minutes 
to flood the fuel cell with produced water, thus effectively 
halting power generation. The H 2 is pumped through the stack, 
reacting with oxygen and picking up and removing water vapor 
on the way. After being condensed, the liquid water is separated 
from the H 2 by the H 2 pump/H 20 separator and discharged 
from the fuel cell to be stored in the ECLSS potable water 
storage tanks. 

A check valve in the water discharge line prevents a back 
pressure from the water tanks from flooding the fuel cells. If the 
water tanks are full or there is line blockage, the check valve will 
close and the water relief valve, which opens at 2328 mmHg 
(45 psia), opens to allow the water to vent overboard through the 
H 2 O relief line and nozzle. 

For redundancy, there are two thermostatically activated 
heaters wrapped around the discharge and relief lines to prevent 
blockage caused by the formation of ice in the lines. Two 
switches on Panel R12, FUEL CELL H 2 O LINE HTR and H 2 O 
RELIEF HTR, provide the flight crew with the capability to 
select either AUTO A or AUTO B for the fuel cell water 
discharge line heaters and the water relief line and vent heaters, 
respectively. 
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These Parameter Appear on CRT and 
Are Sent to SM Alert Program 

(T) H2 Reactant Valve 
I O2 Reactant Valve 
) O2 Vent Line Temp 
) H2 Vent Line Temp 1 
1 H2 Vent Line Temp 2 
© H2O Line Temp 

1 H2O Relief Valve Temp 
© H2O Relief Line Temp 
© H2O Relief Nozzle Temp 1 
H2O Relief Nozzle Temp 2 

Panel R 1 
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Purge Valves 


Purge 

Heater 


O2 Purge 


S^H2 Purge 



INHIBIT 

Panel R 12 


Panel 2 


Panel F 9 . 


Panel F 9 


Fuel Cell 1 Typical - Displays and Controls 
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Water line temperature is maintained by the thermostati¬ 
cally controlled heaters when in use between 54° and 68° C 
(140 to 150°F). The water relief valve temperature is maintained 
by the thermostatically controlled heaters when in use between 
21° and 37° C (70° to 100°F). Temperature sensors located on 
the fuel cell water discharge line, relief valve, relief line, and vent 
nozzle are displayed on the CRT. 

If the KOH catalyst in the fuel cell migrates into the 
product water, a pH sensor located downstream of the H 2 
pump/H 20 separator will sense the presence of the catalyst as a 
high pH and the crew is alerted with an SM ALERT and 
displayed on the CRT. 

During normal fuel cell operation, the reactants are present 
in a closed-loop system and are 100-percent consumed in the 
production of electricity. Any inert gases or other contaminants 
will accumulate in and around the porous electrodes in the cells 
and reduce the reaction efficiency and electrical load support 
capability. Purging is therefore required at least every eight hours 
to cleanse the cells. When a purge is initiated by opening the 
purge valves, the O 2 and H 2 become open-loop systems with 
increased flows allowing the reactants to circulate through the 
stack, pick up the contaminants, and blow them out overboard 
through the purge lines and vents. Electrical power is produced 
throughout the purge sequence, although no more than 8 
kilowatts should be required from a fuel cell being purged 
because of the increased reactant flow. 

The purge can be controlled manually or automatically by 
use of the switches on Panel R12. The basic purge sequence is 
the same regardless of the mode selected. First, the purge line 
heaters are activated to prevent any condensate from freezing 
and thus block the lines. The purge line heater switch is located 
on Panel R12 and identified as FUEL CELL PURGE HEATER. 
The switch positions are GPC, OFF, and ON; the purge line 


) 


> 


heaters are commanded on or off automatically if in the GPC 
position or manually by the flight crew in the ON and OFF 
positions. When minimum temperatures of 20°C (69°F) for the 
O 2 line and 26° and 4°C (79° and 40°F) for the H 2 1 and 2 
lines are indicated by line temperature sensors and verified by the 
flight crew or GPC within 27 minutes, the purge sequence begins. 

To initiate the automatic GPC mode, the FUEL CELL GPC 
PURGE SEQ switch on Panel R12 must be held in the START 
position until a talkback indicator turns GRAY (approximately 
3 seconds). The automatic purge sequence will not be on if the 
indicator shows a BARBERPOLE. The GPC turns the purge line 
heaters on and monitors the temperature. If the temperatures 
are not up to minimum after 27 minutes, the GPC will issue an 
SM ALERT and display the data on the CRT. When the proper 
temperatures have been attained, the GPC will open for two 
minutes and then close the H 2 and 02 purge valves for Fuel cells 
1, 2, and 3 in that order. The GPC checks the status of the purge 
valves by comparing the H 2 and 02 flow rates with the fuel cell 
current output. Flow rates should increase 0.2 kilograms per 
hour (0.6 pounds per hour) for H 2 and 0.9 kilograms per hour 
(2.2 pound per hour) for O 2 when the purge valves are open. If 
the GPC determines that a valve has failed closed, it will issue an 
SM ALERT and display the data on the CRT. If the GPC 
determines that a valve has failed open, it will terminate the 
purge sequence, but will leave the heaters on and issue an SM 
ALERT with the data displayed on the CRT. Fifty-five minutes 
after the Fuel Cell 3 purge valves are closed (to ensure that the 
purge lines have been totally evacuated), the GPC turns off the 
purge line heaters and the GPC PURGE SEQ indicator shows a 
BARBERPOLE, signifying the end of the automatic purge 
sequence. 

The manual fuel cell purge would be initiated by the flight 
crew placing FUEL CELL PURGE HEATER switch to ON when 
the proper temperatures have been attained. The ON position 
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will open the H 2 and 02 purge valves for Fuel Cells 1, 2, 3 in 
that order for two minutes and then close them. The CRT would 
display the H 2 and 02 flow rates with the fuel cell current at the 
same values as in the automatic mode. The purge line heaters are 
turned OFF after 55 minutes from the last fuel cell purge by the 
flight crew ending the purge sequence. 

In order to cool the fuel cell stack during its operation, 
distribute heat during fuel cell starting, and warm the cryogenic 
reactants entering the stack, the fuel cell circulates a coolant— 
fluorinated hydrocarbon (FC-40)-throughout the fuel cell. Fuel 
cells 1, 2, and 3 are identical in respect to the coolant loop in the 
fuel cell and its interface with the ECLSS coolant loops. 

At the coolant entrance to the fuel cell, the temperature of 
the coolant returning from the ECLSS Freon-40 loops is sensed 
before it passed through a 75-micron fdter. After the filter, two 
temperature-controlled mixing valves allow some of the hot 
coolant to mix with the cool returning coolant to prevent the 
coolant flowing into the condensor exist control valve from 
undergoing repeated oscillations. The condensor exit control 
valve adjusts the flow of the coolant through the condensor to 
maintain the H 2 /H 2 O vapor exiting the condensor at a tempera¬ 
ture between 64° and 67° C (148° and 153°F). 

The stack inlet control valve maintains the temperature of 
the coolant entering the stack between 80° and 86° C (177° and 
187°F). The accumulator is the interface with the O 2 cryogenic 
reactant to maintain an equalized pressure between the O 2 and 
the coolant (the O 2 and H 2 pressures are equalized at the dual 
gas regulator) to preclude a high pressure differential in the stack 
which could rupture the thin walls of the fuel cells. The pressure 
in the coolant loop is sensed before the coolant enters the stack. 

The coolant is circulated through the fuel cell stack to 
absorb the waste heat from the H 2 /O 2 reaction occurring in the 


individual cells. After leaving the .stack, the temperature of the 
coolant is sensed with the data transmitted to the GPC, the 
FUEL CELL STACK TEMP meter through the Fuel Cell 1, 2, 3 
switch located below the meter on Panel 2, and to the CRT 
display. The FUEL STACK TEMP yellow caution/warning light 
on Panel F7 and the BACKUP C/W and SM ALERT lights will 
illuminate if fuel cell and stack temperatures exceed certain 
limits: below 79°C (175°F) or above 100°C (212°F) for Fuel 
Cell 1, below 85°C (185°F) or above 105°C (222°F) for Fuel 
Cell 2, and below 90°C (195°F) or above 114°C (238°F) for 
Fuel Cell 3. The hot coolant from the stack flows through the 
O 2 and H 2 preheaters, where it warms the cryogenic reactants 
before they enter the stack. 

The coolant pump utilizes three-phase ac power to circulate 
the coolant through the loop. The differential pressure (AP) 
sensor senses a pressure differential across the pump to determine 
the status of the pump. The FUEL CELL PUMP caution/ 
warning light on Panel F7 will illuminate if Fuel Cell 1, 2, or 3 
coolant pump pressure is below 2587 or above 3881 mmHg 
(50 and 75 psia). The SM ALERT light also will illuminate and a 
fault message will be sent to the CRT. If the coolant pump for 
Fuel Cell 1, 2, or 3 is OFF, the BACKUP C/W light illuminates 
and a fault message is sent to the CRT. Downstream of the 
pump is the temperature-actuated flow control valve. It adjusts 
the coolant flow to maintain the fuel cell coolant exit temperature 
between 92° and 112°C (196° and 235°F). The stack inlet 
control valve and flow control valve have bypass orifices to allow 
coolant flow through the coolant pump and to maintain some 
coolant flow through the condensor for water condensation, even 
when the valves are fully closed due to the requirements of 
thermal conditioning. 

The coolant (that which is not made to bypass) exits the 
fuel cells to the ECLSS Freon40 coolant loop fuel cell heat 
exchanger, where it transfers its excess heat to the Freon to be 
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dissipated through the freon-21 coolant loop system in the 
mid-fuselage. 

In addition to thermal conditioning by means of the coolant 
loop, the fuel cell has internal startup, sustaining, and end cell 
heaters. The 3482-watt startup heater is used only during startup 
to warm the fuel cell to its operational level. The two 160-watt 
end cell heaters keep the cells at the end of the fuel cell stack at 
the same temperature as the cells in the middle of the stack. The 
1194-watt sustaining heaters normally are used during low power 
periods to maintain the fuel cells at their operational temperature. 

The electrical control unit (ECU) is the brain of the fuel 
cell. The module is located in the fuel cell and contains the 
startup logic, heater themostats, and 30-second timer; it is the 
interface with the controls and displays for fuel cell startup, 
operation, and shutdown. The ECU controls the supply of ac 
power to the coolant loops, H2 pump/H20 separator, the pH 
sensor, and the dc power supplied to the flow control bypass 
valve (open only during startup), the internal startup, sustaining, 
and end cell heaters. The ECU also controls the status of the 
FUEL CELL 1, 2. 3 READY FOR LOAD and COOLANT PUMP 
AP talkback indicators on Panel Rl. 

The nine fuel cell circuit breakers which connect the 
three-phase ac power to the three fuel cells are located on Panel 
L4 and the fuel cell ECU receives its power from an essential bus 
through the FC (flight critical) CNTLR switch on Panel 014. 

The FUEL CELL START/STOP switch on Panel Rl is used 
to initiate the start sequence or stop the fuel cell operation. 
When this switch is held in its momentary start position, the ECU 
connects the three-phase ac power to the coolant pump and H2 
pump/H20 separator (allowing the coolant and the hydrogen- 
water vapor to circulate through these loops), and connects the 
dc power to the internal startup, sustaining, and end cell heaters 



and the flow control bypass valve. The switch must be held in 
the START position until the COOLANT PUMP AP talkback 
shows GRAY in approximately three to four seconds, which 
indicates that the coolant pump is functioning properly by 
creating a differential pressure across the pump. When the 
COOLANT PUMP AP indicates talkback BARBERPOLE, it 
indicates the coolant pump is not running. 

The READY FOR LOAD talkback will show GRAY after 
the 30-second timer times out and-the STACK OUT TEMP is 
above 86° C (187°F) (which can be monitored on Panel 2 in 
conjunction with the 1, 2, 3 switch located beneath the FUEL 
CELL STACK OUT TEMP meter); this indicates that the fuel 
cell is up to the proper operating condition and is ready for loads 
to be attached to it. It should not take longer than 15 minutes 
for the fuel cell to warm up and become fully operational, the 
actual time depending on the fuel cell initial temperature. The 
READY FOR LOAD indicator remains GRAY until the FUEL 
CELL START/STOP switch is placed to STOP, the FC CNTLR 
switch is placed to OFF, or the ESS (essential) BUS power is lost 
to the ECU. 

The STARTUP HEATER ENABLE/INHIBIT switch on 
Panel R12 provides the crew control of the OFF/ON status of 
the startup heaters during fuel cell startup. The INHIBIT 
position allows the startup heaters to remain off and would be 
used only when starting an already warm fuel cell. 

The Fuel Cell 1, 2, or 3 dc voltage and current (amps) can 
be monitored on the DC VOLTS and DC AMPS meters on Panel 
F9, using the FUEL CELLS VOLTS/AMP rotary switch to select 
a specific fuel cell. 

The fuel cells will be on, but in standby, when the crew 
boards and the vehicle is powered by the ground support 
equipment (GSE). Just before liftoff (T minus 3 minutes and 
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30 seconds), the GSE is powered off and the fuel cells take over 
the vehicle electrical loads. Indication of the switchover can be 
noted on the CRT display and the DC AMPS meter. The fuel cell 
current will increase to approximately 220 amps, the 02 and H 2 
flow increases to approximately 1.8 and 0.2 kilogram per hour 
(4 and 0.6 lb/hour), respectively, and the fuel cell stack 
temperature increases slightly. 

Fuel cell standby consists of removing the electrical loads 
but continuing operation of the fuel cell pumps, controls, 
instrumentation, and valves, with the electrical power being 
supplied by the remaining fuel cells. A small amount of reactants 
are used to generate power for the fuel cell internal heaters. 

Fuel cell shutdown, after standby, consists of stopping the 
coolant pump and H 2 pump/H20 separator by positioning that 
fuel cell START/STOP switch on Panel R1 to the STOP position. 
If the environment in the fuel cell compartment beneath the 
payload bay is lower than 4°C (40°F), the fuel cell should be left 
in standby instead of shutdown to prevent it from freezing. 

Each fuel cell power plant is 355 millimeters (14 inches) 
high, 381 millimeters (15 inches) wide, and 1016 millimeters 
(40 inches) long and weighs 91 kilograms (201 pounds). 

The voltage and current of each is 2 kilowatts at 32.5 volts 
dc, 61.5 amps, and 12 kilowatts at 27.5 volts dc, 436 amps. Each 
fuel cell is capable of supplying 12 kilowatts peak, 7 kilowatts 
coverage of power. The three fuel cells are capable of a maxi¬ 
mum continuous output of 21,000 watts with 15 minute peaks 
of 36,000 watts. The average power consumption of the opera¬ 
tional orbiter is expected to be approximately 14,000 watts, 
leaving 7 kilowatts average available for payloads. Each fuel cell 
will be serviced between flights and reused until each has accum¬ 
ulated 2,000 hours of on-line service. 


ELECTRICAL POWER DISTRIBUTION AND CONTROL 
(EPDC) 


The dc power generated by the three fuel cells is routed to 
main buses and essential buses located in the distribution and 
controller assemblies. 


The three main dc buses (MNA, MNB, and MNC) are the 
primary source of dc power for all orbiter electrical equipment. 
Each fuel cell is dedicated to a specific main bus: FC-1 to MNA, 
corresponding main bus by power contactors, which are dc- 
motor-driven remote switches rated at 500 amps and are located 
in the distribution assembly (DA). The DA, through fuses, 
powers the corresponding buses in the mid power controller 
(MPC) assembly; the forward power controller (FPC) assembly; 
the forward load controller (FLC) assembly; the aft power con¬ 
troller (APC) assembly and the aft load controller (ALC) 
assembly. 


The power controller assemblies (PCA’s) and load controller 
assemblies (LCA’s) use remote switching devices to distribute the 
loads. The PCA’s contain remote power controllers (RPC’s), 
which are solid-state, remote switching devices used for applying 
loads up to 20 amps and relays for remote switching. The LCA’s 
contain hybrid circuit devices, which are solid-state, remote 
switching devices used as logic switches and as remotely con¬ 
trolled switches for electrical loads of 5 amps or less. The mid 
power controllers contain RPC’s relays, and hybrid circuit 
drivers. The remote switching devices permit location of major 
electrical distribution buses close to the major loads, which 
eliminates the need for heavy electrical feeders to and from the 
crew cabin flight deck display and control panels. This greatly 
reduces spacecraft wiring, and thus weight, and permits more 
flexible electrical load management. 



; 


270 



Space Shuttle Spacecraft Systems 




DC Power Distribution Block Diagram 

All the No. 1 distribution assemblies and controller assem¬ 
blies go with FC-1 (fuel cell)/MNA, all No. 2 assemblies with 
FC-2/MNB, and all No. 3 assemblies with FC-3/MNC. The aft 
Power Controllers 4, 5, and 6 go with FC-l/MNA, FC-2/MNB, 
and FC-3/MNC, respectively. The FC/MAIN BUS A switch on 
Panel R1 is used to connect fuel cell 1 to MNA Distribution and 
Controller Assemblies 1, thus MNA buses throughout the vehicle 
are powered up through fuses. The indicator located adjacent to 
the FC/MAIN BUS A switch on Panel R1 indicates ON when 
Main Bus A is connected to Fuel Cell 1 and OFF when it is not 


) 




Main Bus A Distribution 

connected. The FC/MAIN BUS B and FC/MAIN BUS C switches 
and indicators on Panel R1 are essentially the same, except for 
the respective bus. 

MN BUS TIE A switch on Panel R1 can be used to tie 
MNA to MNB or MNC. The adjacent indicator would indicate 
ON when MNA is connected to the tie bus and OFF when it 
is not connected. The MN BUS TIE B and MN BUS TIE C 
switches and indicators on Panel R1 are essentially the same. 

The Main Bus A, B, or C voltages can be displayed on the 
DC VOLTS meter on Panel F9 through the MAIN VOLTS A, B, 
or C rotary switch. The MAIN BUS UNDERVOLTS red caution 
and warning light on Panel F7 will illuminate if Main Bus A, B, or 
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Remote Power Controller 


C voltage is at 25.2 Vdc, informing the crew that the minimum 
equipment operating voltage limit of 24 Vdc is being violated. 
A backup caution/warning light will also illuminate at 25.2 Vdc. 
An SM ALERT light will illuminate at a voltage of 27.0 Vdc or 
less, alerting the flight crew to the possibility of a future low- 
voltage problem. A fault message also is transmitted to the CRT. 

Depending on the criticality of electrical equipment, some 
electrical loads may receive power from two or three sources for 
redundancy only, and not for total power consumption, and for 
transient sensitive equipment. 

Three essential buses, ESS 1BC, ESS 2CA, ESS 3AB, sup¬ 
ply control power to the flight deck crew display and control 
switches which are necessary to restore power to a failed main dc 
or ac bus and to essential non-EPS electrical loads and switches. 
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Hybrid Load Controller 

The nominal fuel cell voltage is 27.5 to 32.5 volts dc, and 
the nominal main bus voltage range is 27 to 32 volts dc, which 
correspond to 12 and 2 kilowatt loads, respectively. 


Each essential bus receives power from three redundant 
sources: a fuel cell and two main buses. ESS (essential) 1 BC bus 
receives power through the ESS BUS SOURCE FC1 switch on 
Panel R1 and Main Bus B and C through remote power 
controller’s (RPC’s) which are controlled by the ESS BUS 
SOURCE MN B/C switch, indicating Fuel Cell 1 and MN B and 
MN C are powering that essential bus. ESS 2 CA receives power 
through the ESS BUS SOURCE.FC 2 switch and Main Bus C and 
A through the ESS BUS SOURCE FC 3 switch and Main Bus A 
and B through RPC’s which are controlled by the ESS BUS 
SOURCE A/B switch. Essential buses in the DA are distributed 
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through fuses to the controller assemblies and to the flight deck 
and mid-deck display and control panels. 

The ESS bus voltage can be monitored on the “DC Volts” 
meter on Panel F9 through the “ESS Volts 1 BC, 2 CA, or 3 AB” 
rotary switch. An “SM Alert” will illuminate to inform the flight 
crew if the essential bus voltage is less than 25 Vdc. A fault 
message also is transmitted to the CRT. 



Essential Bus 1BC Distribution 













Main buses located in the forward power controller’s 
(FPC’s) are connected through RPC’s and diodes to nine control 
buses. The RPC’s are powered continuously unless the 
CONTROL BUS PWR switch MNA, MNB, or MNC on Panel R1 
is placed to the momentary RESET position, which turns the 
RPC power off and resets the RPC if it has been tripped out. 
Each control bus receives power from two main buses for system 
reliability. The control buses are CNTL AB 1, 2, and 3: CNTL 
BC 1, 2, and 3, and CNTL CA 1, 2, and 3. CNTL bus AB 1 
receives power from MNA and B; the one indicates the number 
of the bus and not a fuel cell. An SM ALERT is illuminated if 
the control bus voltage is less than 24.5 Vdc. A fault message is 
sent to the CRT. Mission Control Center (MCC) in Houston can 
monitor the status of each RPC. The control buses are located 
only on the flight deck and mid-deck areas behind the displays 
and controls. They are required and used only for control power 
to the display and control panel switches. 

Until T minus 3 minutes and 30 seconds, power to the 
orbiter is load shared with the fuel cells and GSE, even though 
the fuel cells are on and capable of supplying power. Main bus 
power is supplied through the T-0 umbilicals, MNA through the 
left side umbilical, and MNB and C through the right side 
umbilical to APC (aft power controller), 4, 5, and 6. From APC 
4, 5, and 6 the GSE power is directed to the DA, where the 
power is distributed throughout the vehicle. The power for the 
preflight test bus also is supplied through the T-0 umbilical. 
These test buses are scattered throughout the orbiter and are 
used for GSE-related functions, although they also power up the 
essential buses in the APC’s, when on GSE. As in the main bus 
distribution, essential bus power from the APC’s is directed to 
the DA’s and then distributed throughout the vehicle. T minus 
3 minutes, 30 seconds, the ground turns off the GSE power to 
the main busses and the fuel cells automatically pick up the 
loads. At T-O, the T-0 umbilical is disconnected with the pre- 
flight Test Bus wires live. 
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Control Bus AB1 (2,3) Voltage 



GSE Power 
MNA 
(28 Vdc) 

GSE On 


GSE Off >4 


GSE Power 
Preflight 1 
(28 Vdc) 



GSE Orbiter 

MDM LAI > 


T-0 Umbilical 


Orbiter and GSE Power Interface 
(MNA Only) 

The EPDC can provide 50 kwh of electrical energy to the 
payloads (based on a seven-day mission) when all three fuel cells 
are operating, the payload bay doors are fully opened, and a 
two-panel radiator kit supplements the baseline six-panel unit. 
The primary electrical interface is located at X G 645 in the 
forward payload bay and is the primary payload (PRI PL) bus. 
This bus is capable of transferring 7 kw of average power at 27.2 
vdc from Fuel Cell 3 through the positioning of the PAYLOAD 
PRI FC3 switch on Panel Rl. As a backup to Fuel Cell 3, the 
primary electrical interface can transfer 5 kw of average power at 
a minimum of 26.8 Vdc from either MNB or MNC buses through 
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the positioning of the PAYLOAD PRI MNB or PRI MNC 
switches on Panel Rl. A talkback indicator adjacent to each of 
these switches on Panel Rl indicates ON when that bus is 
connected to the PRI PL bus and OFF when not connected. 


bus is used, the ability to connect MNB to the PRI PL bus is 
lost. If payload equipment requiring electrical power from two 
separate orb iter sources is required, this backup interface would 
be used. 


A backup to the PRI PL bus can be used by installation of 
an orbiter furnished kit. The backup (SEC PL) bus can transfer 
5 kw of average power directly from MNB bus. If the SEC PL 


There are two additional primary buses in the aft section of 
the payload bay at X 0 1307, referred to as aft payload (AFT PL) 
bus MNB and MNC. These can power the AFT PL bus MNB and 


Payload Bay 



Orbiter/Payload Power Interface Schematic 
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MNC when the PAYLOAD AFT MNB or AFT MNC switch is 
positioned to ON, on Panel Rl. Each bus can transfer 1.5 kw of 
average power and a peak of 2 kw at a minimum of 25.2 vdc. 
They are used by payloads in the aft section of the payload bay. 

Two other sources — auxiliary payloads A and B (AUX PLA 
and AUX PLB) are located adjacent to the primary and 
secondary buses in the mid payload bay area at X 0 645. They 
can supply a total of 0.4 kw average power from MNA and MNB 
buses through positioning of the PAYLOAD AUX switch to ON, 
on Panel Rl. The two auxiliary payload buses may be dioded 
together to form one bus, AUX PL A/B, redundantly powered by 
two sources. The auxiliary buses are planned to be used for 
emergency equipment and functions only. 

Two or more feeders to the payload may be used 
simultaneously, but two orbiter power sources may not be tied 
directly within the payload. Any payload equipment requiring 
electrical power from two separate orbiter sources will ensure 
isolation of these power sources so that no single failure in a 
load, or succession or propagation of failures in a load, will cause 
an out-of-limits condition to exist on the orbiter system 
equipment on more than one bus. 

The PAYLOAD CABIN switch on Panel Rl provides MNA 
or MNB power to patch panels located under the on-orbit, 
payload specialist, and mission specialist stations located at the 
aft flight deck. These patch panels supply power to the payload- 
related equipment located on panels at these stations. Two 
three-phase circuit breakers, AC 2 CABIN PL 3<p and AC 3 
CABIN PL 3 <p, on Panel MA73C provide ac power to the patch 
panels. 

Alternating-current power is generated and made available 
to using systems through three ac buses: AC1, AC2, and AC3. 
The inverters convert dc to ac and the ac bus distribution assem- 



On-Orbit 

Station 


Payload 

Specialist 

Station 


Mission 

Specialist 

Station 
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Note: The purpose of patch panels is to supply power to payload-related 
equipment located on panels at these stations. 


Payload Cabin Switch 


blies contain the ac buses and the ac bus sensors. The ac power 
is distributed to the flight and mid-deck display and control 
panels and in the payload bay deployment mechanisms, in pay- 
loads, and in the aft main engine controllers and payload bay 
doors. The inverters are located in the forward avionics bays of 
the crew compartment. 


The three phase inverters for AC 1 receive power from MNA, 
AC2 from MNB, and AC3 from MNC. 
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Each bus consists of three separate phase buses connected in 
a three-phase array. Static inverters, one for each phase, are 
rated at 750 va (volt-amps) per phase and have an output voltage 
of 117 plus three minus one volts at 400 plus or minus 2 Hertz. 
The inverter efficiency is approximately 76.5 percent. 

The three-phase inverters for ACT receive power only from 
MNA, AC2 from MNB, and AC3 from MNC. The INV PWR 
switches 1, 2, 3 on Panel R1 are used to apply main bus power to 
the inputs of each phase inverter. An indicator adjacent to each 
switch shows the status of the switch; all three inverters of INV 1 
have MNA bus power and all must be on before the indicator 
shows ON, as an example. The indicator would show OFF when 
bus power is not connected to INV 1. 

The INV/AC Bus switches 1, 2, 3 on Panel R1 are used to 
apply each inverter output to the respective ac bus. An indicator 
adjacent to each switch shows its status, all three inverters of 
inverter 1 must be connected to their respective ac buses before 
the indicator indicates On. 

The INV PWR and INV/AC BUS switches must have control 
power from the AC CONTR circuit breakers on Panel R1 in 
order to operate. Once ac power has been established, these 
circuit breakers are opened to prevent any inadvertent discon¬ 
nection, either by switch failure or accidental movement of the 
INV PWR or INV/AC BUS switches. 

Each ac bus has a sensor, a switch, and a circuit breaker for 
flight crew control. Te AC 1, 2, 3 SNSR circuit breakers are 
located on Panel 013 and apply essential bus power to its 
respective AC BUS SNSRS 1, 2, 3 switch on Panel R1 and 
operational power to the respective INV/AC BUS switch 
indicator. The AC Bus SNSR 1, 2, 3 switch selects the mode of 
operation of the ac bus sensor: AUTO TRIP, MONITOR, or 


OFF. The ac bus sensor monitors each ac phase bus for over or 
under voltage, and each phase inverter for an overload signal. 
The overvoltage limits are bus voltages greater than 123 to 127 
Vac for 50 to 90 milliseconds. The undervoltage limits are bus 
voltages less than 102 to 108 vac for 6.5 to 8.5 milliseconds. The 
overload is when any ac phase current is greater than 14.5 amps 
for 10 to 20 seconds or is greater than 17.3 to 21.1 amps for 4 to 
6 seconds. 

When the respective AC BUS SNSR switch is positioned to 
the AUTO TRIP position and an overload or overvoltage 
condition exists, the ac bus sensor will illuminate the respective 
yellow AC VOLTAGE or AC OVERLOAD caution and warning 
light on Panel F7 and trip out (disconnect) the inverter from its 
respective phase bus for the bus/inverter causing the problem. 
There is only one AC VOLTAGE and one AC OVERLOAD 
caution and warning light; as a result, all nine inverters/ac phase 
buses can illuminate the lights. The AC VOLTS meter and 
rotary switch (AC1, <pA, 4>B, 0C; AC2, <j> A, <pB, </>C; AC3, <pA, 
<pB, 4>C) on Panel F9 or the CRT display would be used to 
determine which inverter or phase bus caused illumination of the 
light. The phase bus causing the problem would show 0 volts. 
Because of the various three-phase motors throughout the 
vehicle, there will be a small induced voltage on the phase bus if 
there is only one phase which has loss of power. Before power 
can be restored to the tripped bus, the trip signal to the INV/AC 
BUS switch must be removed by positioning the AC BUS SNSR 
switch to OFF, then back to the AUTO TRIP position, which 
extinguishes the caution and warning light. The INV/AC BUS 
switch is then positioned to ON, restoring power to the failed 
bus. If the problem is still present, the sequence will be repeated. 

If an undervoltage exists, the yellow AC VOLTAGE caution 
and warning light on Panel F7 will illuminate but the inverter will 
not be tripped out from its phase bus. 
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When the AC BUS SNSR 1, 2, 3 switches are in the 
MONITOR position, the ac bus sensor will monitor for an 
overload, overvoltage, and undervoltage and illuminate the 
applicable caution and warning light but will not trip out the 
phase bus/inverter causing the problem. 

When the AC BUS SNSR switches are OFF the ac bus 
sensors are non-operational and all caution and warning and 
trip out capabilities are inhibited. 


A backup caution and warning light will illuminate for 
overload or over/undervoltage conditions. The SM ALERT 
will occur for over/undervoltage conditions. A fault message 
also is sent to the CRT. 

There are 10 motor controller assemblies (MCA’s) used on 
the orbiter; three are in the forward area, four are in the mid 
body area, and three are in the aft area. Their only function is to 
supply ac power to the ac motors used for vent doors, air data 



Electrical Power Distribution Block Diagram 
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doors, star tracker doors, payload bay doors, payload bay 
latches, and reaction control system/orbital maneuvering system 
(RCS/OMS) motor-actuated valves. The MCA’s contain main 
buses, ac buses, and hybrid relays, which are the remote switch¬ 
ing devices for switching the ac power to electrical loads. The 
main buses are used only to supply control or logic power to the 
hybrid relays so that ac power can be switched on/off. If a main 
bus is lost, the hybrid'relays using that main bus will not operate. 

The three forward motor controller (FMC) assemblies 
(FMC-1, FMC-2, and FMC-3) correspond to MNA/AC1, 
MNB/AC2, and MNC/AC3, respectively. Each FMC contains a 
main bus, an ac bus, and an RCS ac bus. The main bus supplies 
control or logic power to the relays associated with both the ac 
bus and RCS ac bus. The ac bus supplies power to the forward 
left and right vent doors, the star tracker Y and Z doors, and the 
air data left and right doors. The RCS ac bus supplies power to 
the forward RCS manifold and tank isolation valves. 

The aft motor controller assemblies (AMC-1, AMC-2, and 
AMC-3) correspond to MNA/AC1, MNB/AC2, and MNC/AC3, 
respectively. Each AMC assembly contains a main bus and its 
corresponding ac bus and a main RCS/OMS bus and its 
corresponding RCS/OMS ac bus. Both main buses are used for 
control or logic power for the hybrid relays. The ac bus is used 
by the aft RCS/OMS manifold and tank isolation and crossfeed 
valves. 

The mid motor controller assemblies (MMC-1, MMC-2, 
MMC-3, and MMC-4) contains two main dc buses and two 
corresponding buses. MMC-1 contains MN bus A and B and their 
corresponding buses, AC1 and 2. MMC-2 contains MNB and C 
and AC2 and AC3 buses. MMC-3 and MMC-4 contain the same 
respective buses as MMC-1 and MMC-2. Loads for the main 
buses/ac buses are vent doors, payload bay door and latches, 
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Aft Motor Control Assembly 
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Mid Motor Control Assembly 
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radiator panel deployment actuator and latches, and payload 
retention latches. 

The electrical components in the mid body are mounted on 
coldplates and cooled by the Freon-21 system coolant loops. The 
PCA’s, LCA’s, MCA’s, and inverters located in the forward 
avionics bays 1, 2, and 3 are mounted on coldplates and cooled 
by the water coolant loops. The inverter distribution assemblies 
in forward avionics bays 1, 2, and 3 are air-cooled. The LCA’s, 
PCA’s, and MCA’s located in the aft avionics bays are mounted 
on coldplates and cooled by the Freon-21 system coolant loops. 


The contractors are: Aerodyne Controls Corp., Farmingdale, 
NY (oxygen, hydrogen check valve, water pressure relief valve); 
Aiken Industries, Jackson, MI (thermal circuit breakers; three- 
phase circuit breakers); AIL Cutler Hammer, Milwaukee, WI 
(remote control circuit breaker); American Aerospace, Farming- 
dale, NY (ac and dc current sensors, current level detector); 
Applied Resources, Fairfield, NJ (rotary switch); Rockwell 
International Autonetics Group, Anaheim CA (ac bus sensor, 
load controller assemblies); Beech Aircraft Corp., Boulder, CO 
(power reactant storage hydrogen and oxygen tanks, gaseous 
oxygen and hydrogen ground support equipment); Bell Indus¬ 
tries, Gardena, CA (modular terminal boards); Bendix Corp., 


Sidney, NY, and Franklin, IN (high density connectors); 
Bussman Division of McGraw Edison, St. Louis, MO (fuses, fuse 
holders, fuse dc limiter high current); Brunswick-Circle Seal, 
Anaheim, CA (water check valve); Consolidated Controls, El 
Segundo, CA (hydrogen, oxygen solenoid valve, undirectional/ 
bidirectional shutoff valve); Cox and Co., New York, NY 
(heaters); Deutsch, Banning, CA (general-purpose connector); 
Fairchild Stratos, Manhattan Beach, CA (gryogenic fluid and gas 
supply disconnects); G/H Technology Go., Santa Monica, CA 
(connector cryo); Hamilton Standard, Windsor Locks, CT (fuel 
cell heat exchanger); Haveg Industries, Inc., Winooski, VT 
(general-purpose wire); ITT Cannon, Santa Ana, CA (connectors, 
bulkhead feedthrough); Labarge, Santa Ana, CA (general-purpose 
wire); Leach Relay, Los Angeles, CA (relay); Malco Microdot 
Corp., Pasadena, CA (connector); Power Systems Division of 
United Technologies, East Hartford, CT (fuel cell powerplants); 
R. V. Weatherford, Glendale, CA (shunt); Statham Instruments, 
Oxnard, CA (cryo pressure transducer); Tayco Engineering, Long 
Beach, CA (fuel cell water dump nozzle); Teledyna Kinetics, 
Solana Beach, CA (dc power contractor); Teledyne Thermatics, 
Elm City, NC (general-purpose wire); Westinghouse Electric 
Corp., Lima, OH (remote power controller electrical system 
inverters); Weston Instruments, Newark, NJ (electrical indicator 
meter) Brunswick-Wintec El Segundo, CA (reactant and coolant 
filters). 
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ENVIRONMENTAL CONTROL AND LIFE SUPPORT SYSTEM 


The environmental control and life support system (ECLSS) 
consists of an atmospheric revitalization subsystem (ARS), water 
coolant loop subsystem (WCLS), atmosphere revitalization 
pressure control subsystem (ARPCS), active thermal control 
subsystem (ATCS), food, water, and waste management subsys¬ 
tem (FWWS), and airlock support subsystem. These subsystems 
interact to provide a habitable environment in the crew compart¬ 
ment for the crew and passengers. 

The ARS provides humidity, carbon dioxide, and carbon 
monoxide control for the crew compartment, controls cabin 
temperature and ventilation, and provides cooling to the flight 
deck avionics, cabin, and avionics bays. 


The ARPCS controls cabin pressure and oxygen partial pres¬ 
sure, nitrogen pressurization of the potable and waste water tanks, 
and storage of nitrogen and emergency oxygen consumables. 

The WCLS collects heat from the cabin atmosphere and 
electronics and transfers it to the ATCS, which rejects it to space 
via water and Freon coolant loops. The ATCS also removes and 
rejects waste heat from the fuel cells, payload, and mid-body and 
aft-located electronic units, while providing heating of the hy¬ 
draulic systems when needed. 

Potable water is produced by the three fuel cells aboard the 
spacecraft and stored in tanks for crew consumption and per¬ 
sonal hygiene; during certain phases of the mission it is also used 
for cooling of the Freon coolant loops. Waste water collected 
from the cabin heat exchanger is stored in tanks along with crew 
members’ waste water. Solid waste remains in the waste manage¬ 
ment system until the orbiter is serviced on the ground. 


The orbiter crew compartment provides a life-sustaining 
environment for a crew of four and has accommodations for four 
passengers. The crew cabin volume with the airlock inside the 
mid deck of the crew compartment is 66 cubic meters (2325 
cubic feet). If the airlock and the tunnel adapter are outside in 
the payload bay area, the volume is 74 cubic meters (2625 cubic 
feet). 


(T) Cabin Temperature 
Control Ducting 


(T) Avionics 
Bay Ducting 

(T)Food 
Management 

(7) Waste 
Management 

(T) Freon Coolant 
Pump Packages 


(T) Atmosphere Revitalization 

(T)Ammonia Boiler and Tanks 
^ (Atmosphere Heat Sinks) 

cxcnanger 



(7) Nitrogen Storage 

(T) Oxygen Storage 

(7) Space Radiator 
Panels Fixed 


. bionics Bays 
Cooling 


(T) Flash Evaporator 


1 Atmospheric Revitalization 

2 Active Thermal Control 

3 Potable Water 

4 Waste Management (Liquid and Solids) 
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ECLSS Schematic 
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ATMOSPHERIC REVITALIZATION CONTROL SUBSYSTEM 

The ARS maintains a habitable environment for the crew 
and passengers and a conditioned environment for the electronic 
avionics equipment located inside the crew cabin. The ARS con¬ 
sists of the water coolant loops (WCL), and the cabin air loops, 
and pressure control. 

CABIN PRESSURE. The cabin is pressurized to 760 milli¬ 
meters of mercury (mmHg) ±103 mmHg (14.7 ±0.2 psia) and 
maintained at an average 80-percent nitrogen and 20-percent 
oxygen mixture by the ARS. 

Oxygen partial pressure is maintained between 152 and 178 
mmHg (2.95 and 3.45 psi), with sufficient nitrogen added to 
achieve the cabin total pressure of 760 plus or minus 10 mmHg 
(14.7 ±0.2 psia) for operational orbiters and 750 +10 mmHg 
(14.5 ±0.2 psia) for the development test flights. 

Oxygen is obtained from three sources: the primary and 
secondary power reactant super-critical cryogenic oxygen storage 
supply system and an emergency gaseous oxygen supply system. 
The supercritical cryogenic oxygen supply system is located in 
the lower portion of the mid fuselage and is also utilized by the 
three power reactant fuel cells. The emergency gaseous oxy¬ 
gen supply is located in the lower forward portion of the mid 
fuselage. 

Nitrogen is obtained from the primary or secondary gaseous 
nitrogen storage supply system located in the lower forward por¬ 
tion of the mid fuselage. For normal orbital operations, one oxy¬ 
gen and nitrogen system is used. For launch and entry, both the 
primary and secondary systems will be used. 

The heart of the ARS is a nitrogen/oxygen control panel 
and a supply panel, oxygen partial pressure sensor, and crew 
compartment positive and negative pressure relief valves. 


Primary and secondary nitrogen are provided to the control 
panel from the N 2 storage tanks via the supply panel. The N 2 /O 2 
control panel selects and regulates primary or secondary O 2 and 
N 2 . There is also a cross-over between the primary and secondary 
systems. The control panel can regulate the emergency gaseous 
oxygen supply and supply oxygen for airlock support. The pri¬ 
mary and secondary systems are used together during airlock 
repressurization. 

The gaseous nitrogen primary and secondary storage tanks 
No. 1 and 2 and O 2 /N 2 supply panel are located in the lower for¬ 
ward portion of the mid fuselage. The N 2 storage tanks are 
serviced to a nominal pressure of 153,240 mmHg (2,964 psia) 
at 26°C (80°F). The emergency oxygen supply tank in the lower 
forward portion of the mid fuselage is serviced to a nominal 
pressure of 126,150 mmHg (2,440 psia) at 26°C (80°F) and 
stores 29.7 kilograms (67.6 pounds) of gaseous oxygen to pro¬ 
vide high flow along with gaseous nitrogen for emergency entry 
in the event of a crew compartment puncture. This emergency 
supply maintains the cabin at 414 mmHg (8 psi) and oxygen par¬ 
tial pressure at 103.5 mmHg (2 psia). 

The O 2 and N 2 systems provide makeup gas for oxygen 
consumption by the crew and passengers. Four crew members 
use an average of 0.79 kilogram (1.76 pounds) of O 2 per person 
per day. Up to 3.49 kilograms (7.7 pounds) of nitrogen and 
4 kilograms (9 pounds) of oxygen are expected to be used per 
day for normal loss of crew cabin air to space and metabolic 
usage. The O 2 and N 2 also provides for repressurization of the 
airlock and pressurization of the potable and waste water tanks. 
The tanks are pressurized to 879 mmHg (17 psi). 

The supercritical cryogenic oxygen primary and secondary 
storage supply systems are controlled individually by ATM (at¬ 
mospheric) PRESS (pressure) CONTROL O 2 (oxygen) SYS 1 
and 2 SUPPLY switches on flight deck and display control Panel 
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Atmospheric Revitalization System Pressurization (Sheet 2 of 3) 


















































































































































































Atmospheric Revitalization System Pressurization (Sheet 3 of 3) 
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L2 (when switch and display nomenclature is printed in all 
caps-e.g. it indicates that it is the exact way it appears on the 
display and control panel). When a switch is positioned to OPEN, 
oxygen supply system is directed to a heat exchanger in Freon-21 
coolant loop system No. 1 (for system No. 1 oxygen) and 
coolant loop system No. 2 (for system No. 2 oxygen) which 
warms the supercritical cryogenic oxygen supply to the 02 
regulator of that system. When the switch is closed, the oxygen 
storage supply system is isolated from the O 2 regulator. An 
indicator above the switches will show when a valve is open and 
closed. 

The oxygen supply system is directed to an O 2 REG (regu- 
labor) INLET manual valve when the respective ATM PRESS 
CONTROL O 2 SYS SUPPLY valve is open. The manual O 2 REG 
INLET valve of that system, when open, directs that O 2 supply 
to its O 2 regulator. The O 2 regulator in each system reduces the 
oxygen supply source pressure to 5,175 millimeters of mercury 
(mmHg) (100 psi) with a minimum flow rate capability of 34 
kilograms (75 lbs) per hour. Each regulator is a two-stage regu¬ 
lator with the second stage functioning as a relief valve when the 
differential pressure across the second stage is 12,678 mmHg 
(215 psi). The relief pressure is vented into the crew module 
cabin. The regulated pressure from system No. 1 and system 
No. 2 is routed to its respective 14.7 psi CABIN REG (regulator) 
INLET manual valve, 8 psi EMERG (emergency) REG (regu¬ 
lator), the PAYLOAD O 2 manual valve and the XOVER (cross¬ 
over) O 2 valve. The check valve in each O 2 supply line between 
the O 2 regulator and the 14.7 CABIN REG INLET prevents O 2 
reverse flow to the 5,175 mmHg (100 psi) regulator. 

The two valves in the crossover manifold are controlled by 
ATM PRESS CONTROL O 2 PRESS SYS 1 and SYS 2 XOVER 
switches on Panel 12. When a switch is opened, that oxygen sup¬ 
ply system is directed to the AIRLOCK SUPPLY OXYGEN 1 
and 2 manual valves, AIRLOCK O 2 1 and 2 EMU (extravehicu¬ 
lar mobility unit), POS (portable oxygen system), the CDR (com¬ 


mander) and PLT (pilot) ejection seat oxygen system, and the 
three face mask outlets. If both ATM PRESS CONTROL O 2 
PRESS SYS 1 and SYS 2 XOVER valves are open, oxygen sup¬ 
ply systems No. 1 and 2 are interconnected. When the respec¬ 
tive ATM PRESS CONTROL O 2 PRESS switch is closed, that 
oxygen supply system is isolated from the crossover manifold. 

The emergency O 2 tank is made of a filament wound Kev¬ 
lar fiber with an Inconel liner. The O 2 tank is serviced to a nom¬ 
inal 126,150 mmHg (2,440 psia) at 26°C (80°F) and stores 
29.7 kilograms (67.6 lbs) of gaseous oxygen. The emergency 
oxygen supply system is controlled by the ATM PRESS CON¬ 
TROL O 2 EMER switch on Panel L2. The emergency O 2 sup¬ 
ply system is directed to its regulator when the ATM PRESS 
CONTROL O 2 EMER switch is open and isolated from the regu¬ 
lator when the switch is closed. An indicator above the switch 
indicates OP (open) when the valve is open, CL (close) when the 
valve is closed, and BARBERPOLE when the motor operated 
valve is in transit. 

The emergency O 2 regulator reduces emergency O 2 supply 
pressure to 15,525 mmHg (300 psi) when the O 2 emergency 
valve is open. The two-stage regulator has a relief valve. When the 
differentia] pressure across the relief valve is 64,687 mmHg 
(1,250 psi), the valve will operate. The relief pressure is vented 
overboard. 

The emergency O 2 regulated pressure is directed to an O 2 
EMER manual valve. When the manual valve is open, the emer¬ 
gency O 2 supply is directed into the O 2 crossover manifold. The 
emergency O 2 supply is normally isolated except for ascent and 
entry. 

The check valve between the Freon-21 coolant loop and 
crossover valve in the primary and secondary supercritical oxygen 
supply system prevents O 2 flow from one supply source to the 
other when the crossover valves are open. 
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The primary and secondary gaseous nitrogen supply tanks 
are identical to the emergency gaseous oxygen supply tank ex¬ 
cept that a titanium liner is used. Each gaseous nitrogen (N 2 ) 
tank is serviced to a nominal pressure of 153,240 mmHg (2,964 
psia) at 26°C (80OF) with a volume of 134,086 cubic centi¬ 
meters (8,181 cubic inches). The two N 2 tanks in each system 
are manifolded together. The primary and secondary nitrogen 
supply systems are controlled by ATM PRESS CONTROL N 2 
SYS 1 and 2 SUPPLY switches on Panel L2. When a switch is 
opened, that nitrogen supply system is directed to an ATM 
PRESS CONTROL N 2 SYS REG (regulator) INLET valve. When 
the switch is closed, the nitrogen supply system is isolated from 
the N 2 SYS REG INLET valve. An indicator above each switch 
regulator. An indicator above each switch indicates CL (close) 
when the valve is closed, OP (open) when the valve is open and 
BARBERPOLE when the motor operated valve is in transit. 



The N 2 XOVER (crossover) manual valve connects both 
regulated N 2 systems when the valve is open. When it is closed, 
the N 2 regulated supply systems are isolated from each other. 
A check valve between the N 2 regulator and N 2 crossover valve 
in each N 2 regulated supply line prevents reverse flow of N 2 
when the crossover valve is open. 

The H 2 O TK (tank) N 2 REG INLET valve in each N 2 regu¬ 
lated supply system permits N 2 to flow into the H 2 O regulator 
when that valve is manually opened. The closed position iso¬ 
lates the N 2 regulated supply from the H 2 O regulator. 

The H 2 O tank regulator of each system reduces the 10,351 
mmHg (201 psi) supply pressure to 879 mmHg (17 psi). Each 
H 2 O tank regulator is a two-stage regulator. The second stage 
relieves pressure into the crew module cabin at a differential 
pressure of 1,034 mmHg (20 psi). 
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Each nitrogen inlet valve is controlled by its respective ATM 
PRESS CONTROL N 2 SYS REG INLET 1 and 2 switch on Panel 
L2. When the individual switch is open, that valve permits that 
N 2 source pressure to that system N 2 regulator, providing the 
respective N 2 supply valve is open. When the individual switch is 
closed, the N 2 supply pressure is isolated from that system N 2 
regulator. An indicator above each switch shows the open or 
indicates CL (close) when the valve is closed, OP (open) when the 
valve is open and BARBERPOLE when the motor operated valve 
is in transit. 

The N 2 regulators in the primary and secondary supply sys¬ 
tems reduce pressure to 10,350 mmHg (200 psi). Each N 2 regu¬ 
lator is a two-stage regulator with the second stage functioning as 
a relief valve. The second stage relieves pressure overboard at 
14,237 mmHg (245 psi). 

The regulated N 2 pressure of each N 2 system is supplied to 
the N 2 crossover valve, the H 2 O (water) tank regulator inlet 
valve, and the O 2 /N 2 controller valve in each N 2 system. 


Two partial pressure oxygen (PPO 2 ) sensors are located in 
the crew module mid deck cabin air supply duct and another 
PPO 2 sensor is located in the flight deck return air duct. 1 he 
PPO 2 sensors in the mid deck cabin air supply duct are sensor A 
and B and provide inputs to the PPO 2 CONTR (controller) SYS 
1 controller and switch. Sensor C provides inputs to a flight deck 
controller. 

When a PPO 2 CNTR switch is positioned to NORM (nor¬ 
mal), the corresponding PPO 2 controller and PPO 2 sensor, in 
conjunction with the ATM PRESS CONTROL PPO 2 SNSR 
(sensor)/VLV switch on panel L2 in the NORM position, provide 
electrical power to the corresponding ATM PRESS CONTROL 
0?/N2 CNTLR VLV switch on Panel L2 for SYS 1 and SYS 2. 
When the O 2 /N 2 CNTRL VLV switch is set on AUTO, electrical 
power automatically controls the nitrogen valve in the corre¬ 
sponding regulated nitrogen supply. If O 2 is required in the crew 
module cabin, the nitrogen valve is automatically closed, the 
14.7 psi cabin regulator opens (providing the 14.7 psi CABIN 
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REG INLET manual valve on that system is open), the 10,350 
mmHg (200 psi) nitrogen supply in the manifold drops below 
5,175 mmHg (100 psi), and oxygen flows through the check 
valve and cabin regulator into the crew module cabin. When suf¬ 
ficient oxygen is present in the cabin as determined by the PP02 
sensor, the nitrogen valve is opened and 10,350 mmHg (200 psi) 
nitrogen enters the manifold. The nitrogen closes the oxygen 
check valve and flows through the 14.7 psi cabin regulator into 
the crew module cabin. Oxygen partial pressure is maintained at 
178 mmHg (3.45 psi). The OPEN and CLOSE positions of the 
N 2 /O 2 CNTLR VLVE SYS 1 and SYS 2 switch on Panel L2 per¬ 
mit the crew to control the nitrogen valve in each system man¬ 
ually. The REVERSE position of the PPO 2 SNSR/VLV switch 
on Panel L2 allows Controller B to SYS 1 and Controller A to 
SYS 2. 

If the 14.7 psi CABIN REG INLET manual valves of SYS 1 
and SYS 2 are closed, the crew module cabin pressure will de¬ 
crease to 8 psi. The PPO 2 CONTR SYS 1 and SYS 2 switches on 
Panel L2 are positioned to EMER (emergency) for the corre¬ 
sponding nitrogen system which selects the 113.8 mmHg (2.2 
psi) oxygen partial pressure. The corresponding PPO 2 sensor and 
controller, through the corresponding PPO 2 CONTR switch and 
the PPO 2 SNSR/VLV switch on NORM, provide electrical inputs 
to the corresponding O 2 /N 2 CNTRL VLV switch. The electrical 
output from the applicable O 2 /N 2 CNTLR VLV switch controls 
the nitrogen valve in that supply system in the same manner as in 
the 14.7 psi mode except that the crew module cabin partial 
pressure is maintained at 113.8 mmHg (2.2 psi). In this mode, 
the crew members would use supplemental oxygen from the 
portable oxygen system and masks. 

The O 2 system Nos. 1 and 2 and N 2 system Nos. 1 and 2 
flows are monitored and sent to the O 2 /N 2 FLOW rotary switch 
on Panel 01. The rotary switch permits SYS 1 O 2 or N 2 or SYS 2 
O 2 or N 2 flow to be monitored on the O 2 /N 2 FLOW meter on 
Panel 01 in PPH (pounds per hour). 


PPO 2 Sensors A and B monitor the oxygen partial pressure 
and transmit the signal to the PPO 2 SENSOR select switch on 
Panel 01. When the PPO 2 SENSOR switch is positioned to 
SENSOR A, oxygen partial pressure from Sensor A is monitored 
on the PPO 2 meter on Panel 01 in psia. If the switch is set on 
SENSOR B, oxygen partial pressure from Sensor B is monitored. 

The cabin pressure sensor transmits directly to the CABIN 
PRESS meter on Panel 01 and is monitored in psia. 

A separate PPO 2 Sensor C monitors the crew module cabin 
oxygen partial pressure and transmits it to a flight deck CRT. 

The RED CABIN ATM caution and warning light on Panel 
F7 would illuminate from any of the following monitored 
parameters: 

Cabin pressure below 14.0 psia or above 15.4 psia 

PPO 2 below 2.8 psia or above 3.6 psia 

O 2 flow rate above 5 lbs/hr 

N 2 flow rate above 5 lbs/hr 

A klaxon will sound in the crew module cabin if the dP/dT 
(which stands for change in pressure versus change in time) is 
greater than 0.05 psi per minute. 

The temperature and pressure of the primary and secondary 
nitrogen and emergency oxygen tanks are monitored and trans¬ 
mitted to the SM (systems management) computer. This informa¬ 
tion is used to compute O 2 and N 2 quantities. 

If the crew module cabin pressure is lower than the pres¬ 
sure outside the cabin, the negative pressure relief valves will 
open in a 10 to 36 mmHg (0.2 to 0.7 psi) range differential per¬ 
mitting flow into the crew module cabin. The maximum flow 
rate at 25 mmHg (0.5 psi) differential is 0 to 296 kilograms (654 
lbs) per hour. 

The crew module cabin vent and vent isolation valves pro¬ 
vide the capability of venting the cabin to ambient following the 
prelaunch cabin pressure integrity test. These two valves are in 
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series, thus both valves must be open to vent the cabin. The 
CABIN VENT VALVE ISOL (isolation) switch on Panel L2 
opens and closes the cabin vent isolation valve. An indicator 
above the switch indicates OP (open) when the valve is open, CL 
(close) when the valve is closed, and BARBERPOLE when the 
valve is in transit. The CABIN VENT VALVE switch on Panel L2 
opens and closes the cabin vent valve. An indicator above the 
switch indicates in the same manner as in the cabin vent isolation 
valve. When both these valves are open, the maximum flow 
lOmmHg (0.2 psi) differential is 408 kilograms (900 lbs) per 
hour. 

The two parallel cabin relief valves provide protection 
against overpressurization of the crew module cabin above 828 
mmHg (16.0 psi) differential. Each cabin relief valve has a back¬ 
up, motor-operated isolation valve. CABIN RELIEF switch A 
controls cabin relief valve A and CABIN RELIEF switch B con¬ 
trols cabin relief valve B. When a switch is positioned ENABLE, 
the corresponding cabin relief valve is enabled and when the 
switch is positioned to CLOSE, the valve is disabled. An indicator 
above each switch shows whether the valve is open or closed. 
Each cabin relief valve will flow a maximum of 68 kilograms 
(150 lbs) per hour. 

Approximately one hour and 26 minutes before launch, the 
crew module cabin is pressurized by ground support equipment 
to approximately 864 mmHg (16.7 psi) for a leak check. The 
CABIN VENT ISOL and VENT valves are then opened and the 
crew module is vented down to 786 mmHg (15.2 psi) or lower. 
The CABIN VENT ISOL and VENT valves are then closed. 

CABIN AIR. Cabin air cools the cabin avionics electronic 
units, the crew, and passengers. Some avionics are cooled by air 
loops within the avionics bays. These loops are not pressure iso¬ 
lated from the crew cabin, although each avionics bay contains a 
closeout cover to minimize air interchange and thermal losses to 
the cabin environment: therefore, equipment contained in these 


air loops meets outgassing and flammability requirements to min¬ 
imize toxicity levels resulting from outgassing materials. Low- 
toxicity materials also are used in the crew cabin habitable areas. 

The crew module cabin contains five air loops: the cabin, 
three avionics bays and the inertial measurement unit cooling 
loop. The crew module cabin atmosphere is drawn through the 
cabin through a 300-micron filter by one of two cabin fans 
located downstream of the filter. 

Each of the cabin fans is controlled individually by the 
CABIN/FAN switch on Panel LI. CABIN FAN A switch turns 
cabin fan A on and off. CABIN FAN B switch controls cabin 
fan B. Normally only one fan is used at a time. 
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AMEU - Alpha/Mach Electronic Unit DDU - Display Driver Unit 

AVVEU - Altitude/Vertical Velocity Electronic Unit DEU - Digital Electronics Unit 

CRT - Cathode Ray Tube VIU/VSU- Video Interface Unit/Video Electronic Unit 
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Crew Module Cabin Air 
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The cabin air is then ducted to the two lithium hydroxide 
(LiOH) canisters where carbon dioxide (CO 2 ) is removed and 
activated charcoal removes odors and trace contaminants. CO 2 
is maintained at 7.6 mmHg (0.147 psia) maximum. The two 
LiOH-activated charcoal canisters are replaced alternately every 
12 hours (for four crew members) via an access door in the mid 
deck floor. 

The cabin atmosphere is then ducted to the crew module 
cabin heat exchanger where the cabin air is cooled by the water 
coolant loops. Humidity condensation is removed from the cabin 
heat exchanger by a fan separator which draws air and water 
from the cabin heat exchanger, separates the air and water, routes 
the water into waste water tanks, and ducts the air through its 
exhaust into the cabin. The two separator fans are individually 
controlled by the HUMIDITY SEP (separator) switch on Panel 
LI. HUMIDITY SEP switch A controls separator fan A and 
HUMIDITY SEP switch B operates separator fan B. The fan sep¬ 
arators separate the air and water by centrifugal force and remove 
up to 118 kilograms (4 lbs) of water per hour. Only one fan sep¬ 
arator is used at a time. 

A small portion of the revitalized/conditioned air from the 
cabin heat exchanger is ducted to the carbon monoxide removal 
unit (installed after the second flight of Orbiter 102 and subse¬ 
quent orbiters), which converts carbon monoxide into C02- A 
bypass duct carries cabin air around the heat exchanger and it 
mixes with the revitalized/conditioned air to control the crew 
module cabin return air at the selected temperature of between 
18 to 26 plus or minus 1°C (65 to 80 plus or minus 20F). The 
CABIN TEMP (temperature) CNTLR (controller) switch on 
Panel LI selects the cabin temperature controller and the CABIN 
TEMP SELECTOR rotary switch on Panel LI selects the desired 
cabin temperature which controls the mixing of the bypass air 
and revitalized/conditioned air before its return to the crew 
module cabin ducting. 
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The three inertial measurement units (IMU’s) are cooled by 
cabin air drawn through the 300-micron filter and across the 
three IMU’s by one of three parallel fans. The air is cooled by the 
water coolant loops which flow through the IMU heat exchanger 
and the cooled air is returned to the cabin. Each of the IMU fans 
is controlled by individual IMU FAN A, B, and C switches on 
Panel LI. When the applicable switch is positioned to ON, that 
fan is on and when positioned to OFF, that fan is off. A check 
valve installed at the outlet of each fan prevents reverse air flow 
through the standby fan chambers. 


Each of the three electronic avionics equipment bays has 
identical air-cooled systems. Air is directed into the avionics bays 



IMU — Inertial Measurement Unit 


at floor level and is drawn through avionics units by connectors 
at the back of each unit. The air then returns to the fan package 
inlet and 300-micron filter upstream of two fans. The air is 
cooled by the heat exchanger for each avionics bay. The water 
coolant loops cool the air and the cooled air is returned to the 
avionics bays. The two fans in each avionics bay are controlled 
by an AV (avionics) BAY FAN switch on Panel LI. When the 
applicable AV BAY FAN switch is positioned to ON, that fan is 
on and when positioned to OFF, that fan is off. A check valve in 
the outlet of each fan prevents a reverse flow in the standby fan. 


The air outlet temperature in each avionics bay andthecabin 
heat exchanger is monitored and sent to the AIR TEMP (tem¬ 
perature) rotary switch on Panel 01. The rotary switch posi¬ 
tioned to AV BAY 1, 2 or 3 position or CAB (Cabin) Hx (heat 
exchanger) out position permits that temperature to be displayed 
on the AIR TEMP meter on Panel 01. 

The air outlet temperature in each avionics bay and the 
cabin heat exchanger provides inputs to the YELLOW AV BAY 
CABIN AIR caution and warning light on Panel F7. The light 
would illuminate if any of the avionics bay outlet temperatures 
are above 57c>C (135°F), if the cabin heat exchanger outlet tem¬ 
perature is above 18°C (65°F), or if the cabin fan delta pressure 
is below 5 mmHg (0.1 psi) or above 15 mmHg (0.3 psi). 

If the payload bay contains the Spacelab pressurized mod¬ 
ule, a kit is installed to provide ducting from the crew cabin into 
the tunnel from the crew compartment mid deck to theSpacelab. 

The fan separators, cabin heat exchanger, avionics heat 
exchangers and inertial measurement unit heat exchanger, waste 
water tanks, LiOH filters, carbon monoxide unit, and waste and 
potable water tanks are located beneath the mid deck crew com¬ 
partment floor. 
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CPU - Computer Processor Unit MSBLS - Microwave Scan Beam Landing System 

I0P - Input Output Processor TACAN - Tactical Air Navigation 


Avionics Bay Cooling 
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Avionics Bay and Cabin Heat Exchanger Temperature Monitoring 
and Caution/Warning 

WATER COOLANT LOOP SUBSYSTEM 

The WCLS provides thermal conditioning of the crew cabin 
by collecting heat through air-to-water heat exchangers and trans¬ 
ferring the heat from the water coolant loops to the Freon cool¬ 
ant loops. 

There are two complete and separate water (H 2 O) coolant 
loops that flow side by side and have the capability of operating 
at the same time. The only difference between FbO Loop No. 1 
and 2, is that Loop No. 1 has two H 2 O pumps and Loop No. 2 
has one pump. 

Some of the electronic units in the avionics bays are mount¬ 
ed on coldplates with H 2 O flowing through the coldplates. The 
heat generated by that electronic unit is transferred to the cold- 
plate and into the H 2 O, which carries the heat away from the 
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electronic unit. Coldplates mounted on the shelves in the avi¬ 
onics bays are connected in a series — parallel arrangement with 
respect to the H 2 O flow. 

The FbO pumps in Loop No. 1 are controlled by the H 2 O 
pump Loop 1 A and B switch on Panel LI in conjunction with 
the Loop 1 GPC (general purpose computer) OFF and ON switch 
on Panel LI. The H 2 O PUMP LOOP 1 switch positioned to GPC 
permits the GPC to energize relays, which cycles H 2 O pump A 
or B for six minutes over a period determined by the GPC and 
the position of the FbO PUMP LOOP 1 A or B position. The ON 
position of the Loop No. 1 switch energizes the relays and allows 
H 2 O pump A or B to operate as determined by the position of 
the H 2 O PUMP LOOP 1 A or B switch. The OFF position of the 
Loop No. 1 switch de-energizes the relays, which prohibits 
operation of the Loop No. 1 H 2 O pump A and B. A ball-type 
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check valve downstream of the H2O pumps prevents reverse 
flow through the standby pump. 

The H2O pump in Loop No. 2 is controlled by the loop 2 
GPC ON, OFF switch on Panel LI. When the switch is in the 


GPC position, the Loop No. 2 H2O pump is controlled by the 
GPC as in the case of the H2O pump in Loop No. 1. 

Normally Water Loop No. 2 will be in operation for launch 
and entry and during on-orbit operations. Water Loop No. 1 
pump B is in operation under GPC control during on-orbit 
operations. 

H2O Loops No. 1 and 2 flow side by side through the same 
areas. Downstream of the H2O pump in each loop, the H2O flow 
splits three ways. One leg goes through the Avionics Bay No. 1 
heat exchanger and coldplates and provides thermal conditioning 
of the crew ingress/egress hatch. Another leg goes through the 
Avionics Bay No. 2 heat exchanger and coldplates and provides 
thermal conditioning of the flight deck cabin windows. The third 
leg goes through the flight deckMDM (multiplexer/demultiplexer) 
coldplates with a predetermined amount of H2O bypassing these 
coldplates and splits again into two parallel paths for the Avi¬ 
onics Bay No. 3 and 3B coldplates. All ot these paths come to¬ 
gether again and flow through the forward development flight 
instrumentation (DFI) coldplates to the Freon-21/H2O heat ex¬ 
changer where excess heat from the WCL is transferred to the 
Freon-21 coolant loops. 

The WCL loop flows from the Freon-21/H2O interchanger 
through the liquid-cooled garment heat exchanger, H2O water 
chiller, cabin heat exchanger, and IMU heat exchanger to the 
FbO pump inlet. 

The controller for each H2O coolant loop is enabled by its 
respective loop BYPASS MODE and MAN switch on Panel LI. 
The AUTO position of the LOOP 1 BYPASS and LOOP 2 BY¬ 
PASS switch allows the corresponding controller to position the 
bypass valve of that FbO loop automatically. The MAN (manual) 
position of the LOOP~ 1 BYPASS and LOOP 2 BYPASS switch 
disables the automatic control of the bypass value of that H2O 
loop and enables the corresponding LOOP 1 BYPASS and LOOP 
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See Sheet 2 
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2 BYPASS MAN INCR DECR switch. The crew would position 
the LOOP 1 BYPASS and LOOP 2 BYPASS MAN switch to 
INCR (increase) or to DECR (decrease) to control that bypass 
valve in that H 2 O coolant loop manually. The bypass valve is 
adjusted manually prior to launch to provide 408 to 453 kilo¬ 
grams (900 to 1,000 pounds per hour) through the interchanger. 
The control system remains in the manual mode for the entire 
flight. 

The accumulator in each H 2 O coolant loop provides a posi¬ 
tive pressure on the H 2 O pump of the corresponding H 2 O loop 
in addition to providing for thermal expansion capability in that 
H 2 O loop. Each accumulator is pressurized with gaseous nitro¬ 
gen at 983 to 1,811 mmHg (19 to 35 psi). 

The pressure at the outlet of the H 2 O pump in each cool¬ 
ant loop is monitored and sent to the H 2 O PUMP OUT PRESS 
switch on Panel 01. When the switch is on LOOP 1 or LOOP 2, 
that H 2 O coolant loop pressure can be monitored on the HbO 
PUMP OUT PRESS meter on Panel 01 in psia. 

The YELLOW H 2 O LOOP caution and warning light on 
Panel F7 would illuminate if H 2 O Coolant Loop No. 1 pump 
outlet pressure is below 2,328 mmHg (45 psi) or above 4,114 
mmHg (79.5 psi) or if H 2 O Coolant Loop No. 2 pump outlet 
pressure is below 2,328 mmHg (45 psi) or above 4,191 mmHg 
(81 psi). 

The pump inlet and outlet pressure of each H 2 O coolant 
loop is monitored and transmitted to the SM GPC for CRT 
capabilities. 

In summary, with use of the crew module cabin structural 
thermal capacity, the crew cabin will not exceed 32°C (90°F) 
during entry or until after flight crew egress, assumed to be 15 
minutes after touchdown. 


ACTIVE THERMAL CONTROL SUBSYSTEM 


The ATCS provides orbiter heat rejection during all mis¬ 
sion phases. The ATCS is composed of two Freon coolant loops 
(FCL’s), coldplate networks for avionics cooling, liquid/liquid 
heat exchangers for orbiter systems cooling, and three heat sink 
subsystems (radiators, flash evaporator, and ammonia boiler). 

During ground operations (checkout, prelaunch, and post¬ 
landing), orbiter heat rejection is provided by the ground sup¬ 
port equipment (GSE) heat exchanger in the Freon coolant loops 
through ground system cooling. 

From liftoff to an altitude greater than 42,672 meters 
(140,000 feet) approximately 125 seconds — thermal lag is uti¬ 
lized. Approximately 125 seconds after liftoff, the flash evap¬ 
orator subsystem is activated and provides orbiter heat rejection 
of the Freon coolant loops via water boiling. Flash evaporator 
operation continues until the payload bay doors are opened on 
orbit. 

When the payload bay doors are opened, radiator panels 
attached to the forward payload bay doors are deployed. The 
forward two panels on each side of the orbiter are deployed 
away from the payload bay doors and radiate from both sides. 
The aft radiator panels on the forward portion of the aft pay- 
load bay doors remain affixed to the doors and radiate only from 
the upper surface. On-orbit heat rejection is provided by the radi¬ 
ator panels; however, during orbital operations where combina¬ 
tions of heat load and spacecraft attitude exceed the capacity of 
the radiator panels, the flash evaporator subsystem is automat¬ 
ically activated to meet total system heat rejection requirements. 

At the conclusion of orbital operations the flash evaporator 
subsystem is activated, and the payload bay doors closed with 
the radiator panels retracted in preparation for entry. 
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Active Thermal Control Freon 21 Coolant Loop (Sheet 1 of 3) 
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Active Thermal Control Freon 21 Coolant Loop (Sheet 2 of 3) 
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The flash evaporator subsystem operates during entry to 
an altitude of 36,576 meters (120,000 feet) where boiling water 
can no longer provide adequate Freon coolant temperatures. 
Through the remainder of the entry phase and postlanding until 
ground cooling is connected, heat rejection of the Freon coolant 
loops is provided by the evaporation of ammonia through the use 
of the ammonia boiler. When ground cooling is initiated during 
postlanding, the ammonia boilers are shut down and heat rejec¬ 
tion of the Freon coolant loops is provided by the GSE heat 
exchanger. 

There are two complete and identical Freon coolant loops; 
Loop No. 1 and Loop No. 2. Both Freon coolant loops operate 
at the same time. There are two Freon coolant pumps in each 
loop with only one pump active per loop. The FCL’s flow side by 
side except for the radiator panels. Freon-21 is utilized in the 
FCL’s. 

The Freon pumps in each Freon coolant loop are con¬ 
trolled by individual FREON PUMP switches on Panel LI. When 
the FREON PUMP LOOP 1 or LOOP 2 switch is positioned to 
A, the Freon pump A in that Freon coolant loop is in operation. 
If positioned to B, the Freon pump B in that loop is in operation. 
The OFF position prohibits either Freon pump operation. A ball- 
check valve downstream of the pumps in each Freon coolant 
loop prevents a reverse flow through the standby pump. 

When a Freon coolant pump is operating, Freon is routed in 
parallel through the fuel cell heat exchangers and the midbody 
coldplate network to cool electronics avionics units. The Freon 
coolant from the midbody coldplate network and fuel cell heat 
exchanger reunites in a series flow path before entering the hy¬ 
draulics heat exchanger, which extracts energy from theFreon-21 
coolant loop to heat the hydraulic systems fluid loops during on- 
orbit hydraulic circulation thermal conditioning operations. Dur¬ 
ing the prelaunch and boost phase of the mission and during the 
atmospheric flight portion of entry through touchdown, the hy¬ 


draulic system heat exchanger transfers excess heat from the hy¬ 
draulic systems to the Freon-21 loops. 

The FCL’s flow to the radiator system, which consists of 
three radiator panels (baseline configuration — two deployable 
and one fixed) attached to the inside of the forward payload bay 
doors (deployable) and the forward section of the aft payload 
bay doors (fixed) and a flow control assembly for each loop. The 
radiator panels are normally bypassed during ascent and descent. 
On-orbit, the flow control assembly controls the temperature of 
the loop (mixed radiator outlet) through use of a variable flow 
control valve which mixes hot bypassed flow with cold flow from 
the radiator. The temperature is controlled to either 3°C (38°F) 
or 13°C (57°F) setpoint temperature. 

The radiator panels on each side of the orbiter are config¬ 
ured to flow in series while flow within each panel is parallel 
through a bank of tubes connected by an inlet and outlet collec¬ 
tor manifold. 

To increase heat rejection capability for large payloads 
requiring 29,000 Btu (British thermal units) per hour of heat 
rejection an additional radiator panel can be kitted into the 
network by attaching a fixed radiator panel to the inside of the 
aft section of the aft payload bay doors. The baseline configura¬ 
tion is designed for payloads rejecting 21,500 Btu per hour. 

A bypass valve in each FCL system permits Freon-21 to 
bypass the radiators except on-orbit. When Freon-21 temperaures 
at the radiator outlet exceed 5°C (41 °F), the radiator system 
heat rejection capability has been exceeded and the flash evapor¬ 
ators are activated automatically to produce the required Freon- 
21 temperature. 

During boost and entry, each deployable radiator panel is 
secured to the payload bay door by six motor-driven latches. 
Deployment for on-orbit operations is by a motor-driven, torque- 
tube-lever arrangement. The aft four fixed radiator panels are at- 
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tached to the payload bay doors by a ball joint arrangement at a 
maximum of 12 places. The ball joints compensate for movement 
of the payload bay door and radiator panel caused by thermal 
expansion and contraction of each member. The forward four 
radiator panels, when deployed, expose both sides of the radiator 
panels to increase the heat rejection capability of the Freon-21 
loops. The four forward radiator panels are deployed 35.5° from 
the payload bay doors. 

The ATCS pumps, interchanger, fuel cell heat exchanger, 
payload heat exchanger, flow proportioning valve modules, and 
mid body coldplates are located in the lower forward portion of 
the mid fuselage. The radiators are attached to the payload bay 
doors. The hydraulic systems’ heat exchanger, ground support 
equipment heat exchanger, ammonia boiler, flash evaporator, and 
aft avionic bay coldplates are located in the orbiter aft fuselage. 
The radiator flow control assemblies are located in the lower aft 
portion of the mid fuselage. 

The radiator panels are constructed of an aluminum 
honeycomb face sheet 3200 millimeters (126 inches) wide and 
8128 millimeters (320 inches) long. The forward deployable 
radiator panels are two sided with a core thickness of 22 
millimeters (0.9 inch). They have longitudinal tubes bonded to 
the internal side of both facesheets. The forward deployable 
panels contain 68 tubes each, with a tube spacing of 48 
millimeters (1.90 inches). Each tube has an inside diameter of 
3.32 millimeter (0.131 inch). Each side of the forward 
deployable radiator panels has a coating bonded by an adhesive 
to the facesheet consisting of silver backed Teflon tape for 
proper emissivity properties. The aft fixed panels are one sided 
with a core thickness of 12.7 millimeters (0.5 inch) with tubes 
only on the exposed side of the panel and a coating bonded by 
an adhesive to the exposed facesheet. The aft panels contain 26 
longitudinal tubes with a tube spacing of 1-25 millimeters (4.96 
inches), and each tube has an inside diameter of 4.57 millimeter 
(0.18 inch). The additional thickness of the forward radiator 
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panels is required to meet deflection requirements when the 
orbiter is exposed to ascent acceleration. 

The radiator panels on the left-hand side (port) facing 
forward are connected in series with Freon-21 coolant loop 1. 
The panels on the right-hand-side (starboard) facing forward are 
connected in series with Freon-21 coolant loop 2. 

The RAD (radiator) CONTROLLER LOOP 1 and LOOP 2 
switch on Panel LI enables Loops No. 1 and 2 controllers A 
and B. When the switch for a loop is positioned to AUTO A, 
radiator controller A automatically controls the radiator flow 
control valve in that loop, which maintains the desired radiator 
mixed outlet temperature as determined by the RAD CON¬ 
TROLLER OUT TEMP switch on Panel 1A. When the switch 
is turned to AUTO B, controller B is enabled and automatically 
controls the radiator control valve in the corresponding loop as 
it did in the case of AUTO A. 

The RAD CONTROLLER OUT (outlet) TEMP switch on 
Panel LI enables the selected controller A or B in Loop No. 1 
or 2 to control the radiator outlet temperature of that loop. 
The radiator outlet temperatures in Loops No. 1 and 2 are 
automatically controlled at 3°C (380F) when the switch is on 
NORM (normal) and at 13°C (570F) when it is on HI. The 
flash evaporator is activated automatically when the radiator 
outlet temperature exceeds 5°C (41°F). 

The RAD CONTROLLER MODE 1 and MODE 2 switch 
on Panel LI permits automatic control of radiator flow control 
valve or manual control of the radiator bypass valve. When in 
the AUTO position for Loop No. 1 or 2, the respective radiator 
flow control valve automatically controls the radiator outlet 
temperature. When in the MAN position, the automatic control 
of the radiator flow control valve in the corresponding loop is 
inhibited and the bypass valve is controlled by the RAD CON¬ 
TROLLER MAN (manual) SEL (select) 1 or 2 switch on Panel 


LI. If the MAN SEL switch is positioned to the RAD FLOW, 
the bypass valve permits the Freon-21 to flow through the 
radiators. If positioned to BYPASS position for that loop, the 
bypass valve permits the Freon-21 in that loop to bypass the 
radiators. 

The indicator located above the RAD CONTROLLER MAN 
SEL 1 and 2 switch on Panel LI indicates the position of the 
bypass valve in that loop. The indicator indicates BYPASS when 
the bypass valve is in the bypass position, BARBERPOLE when 
the motor operated valve in that loop is in transit from the 
bypass or radiator flow position, and indicates RAD when the 
bypass valve in that loop is in the radiator flow position. 

Freon-21 from the radiator flow control valve assembly is 
routed to the ground support equipment (GSE) heat exchanger, 
which is used during ground operations (checkout, prelaunch and 
postlanding) for orbiter heat rejection of the Freon-21 coolant 
loops. Freon-21 from the GSE heat exchanger is then directed 
through the ammonia boiler, then the flash evaporator. 

The flash evaporator is used to reject orbiter heat loads 
from the Freon-21 coolant loops during ascent above 42,672 
meters (140,000 feet) and entry above 36,576 meters (120,000 
feet) altitude and to supplement the radiators in orbit. 

There are two flash evaporators (high-load and topping) 
contained in one envelope. The evaporators are cylindrical and 
have a finned inner core. The hot Freon-21 from the coolant 
loops flows around the finned core and water is sprayed onto the 
core from the nozzles in each evaporator. The water vaporizes, 
cooling the Freon-21. In the low-pressure areas above 36,576 
meters (120,000 feet), water vaporizes quickly. The water 
changing from liquid to vapor removes approximately 1,000 Btu 
per hour per 2.2 kilograms (1 pound) of water. The water supply 
is obtained from the potable water storage tanks and supply 
systems A and B. 
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The flash evaporators are controlled by the FLASH EVAP 
CONTROLLER switches on Panel LI. The evaporators have 
three controllers: PRI (primary) A, PRIB and SEC (secondary). 
These controllers are controlled by the PRIA, PRIB and SEC 
switches on Panel LI. Normally, only one of these switches is 
used at a time. When one of the PRIA, PRIB or SEC switches 
is positioned to GPC, that controller is turned on by the BFS 
(backup flight system) computer as the orbiter ascends above 


42,672 meters (140,000 feet) and is turned off by the BPS 
computer during entry at 36,576 meters (120,000 feet). The 
ON position of the PRIA, PRIB, or SEC switch provides power 
to the flash evaporator controller directly. OFF removes power 
from the flash evaporator controller. The PRIA controller 
utilizes water system A; the PRIB controller utilizes water sys¬ 
tem B. The SEC controller uses water system A if the SEC 
switch on Panel LI is in SPLY A or B if the SEC switch on 
Panel LI is in SPLY B and the HI-LOAD EVAP switch is in the 
ENABLE position. 

The PRIA and B controllers control evaporator outlet 
Freon-21 loop temperatures at 3°C (39°F) and the SEC con¬ 
troller controls evaporator outlet Freon-21 loop temperatures 
at 16°C (62°F). 

The applicable flash evaporator controller pulses water into 
the evaporators, cooling the Freon-21. The steam generated in 
the topping evaporator is ejected through two sonic nozzles at 
opposing sides on each side of the aft end of the orbiter, reducing 
payload water vapor pollutants on orbit and minimizing vent 
thrust effects on the orbiter guidance navigation and control 
system. The hi-load evaporator is used in conjunction with the 
topping evaporator during ascent and entry when higher Freon- 
21 coolant loop temperatures impose a greater heat load which 
requires a higher heat rejection. The HI-LOAD EVAP ENABLE 
switch on Panel LI must be in the ENABLE position for hi-load 
evaporator operation. After leaving the high-load evaporator, the 
Freon-21 would also flow through the topping evaporator for 
additional cooling. The steam generated by the hi-load evapo¬ 
rator is ejected through a single sonic nozzle on the left-hand 
(port) side aft end of the orbiter facing forward. The hi-load 
evaporator would not normally be used on orbit because it has a 
propulsive vent and might pollute the payload. 

The topping evaporator can be used to dump excess potable 
water from the storage tanks. In this mode, the radiator flow 
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control valve assembly has an alternate control temperature of 
13.8°C (57oF), which is used during forced water dumping. 

Heaters are employed on the topping and hi-load steam 
ducts of the flash evaporator to prevent freezing. The HI-LOAD 
DUCT HTR (heater) switch on Panel LI positioned to A provides 
electrical power to the thermostatically controlled A heaters on 
the hi-load evaporator steam duct and steam duct exhaust. The 
B position provides electrical power to the thermostatically 
controlled B heaters on the hi-load evaporator steam duct and 
steam duct exhaust. The A/B position provides electrical power 
to both the A and B heaters. The C position provides electrical 
power to the thermostatically controlled C heaters on the hi-load 
evaporator steam duct and steam duct exhaust. The OFF posi¬ 
tion removes electrical power from the heaters. 

The TOPPING EVAPORATOR HEATER DUCT switch on 
Panel LI positioned to A provides electrical power to the ther¬ 
mostatically controlled A heaters on the topping evaporator. The 
B position provides electrical power to the thermostatically 
controlled B heaters. The A/B position provides electrical power 
to both the A and B heaters. The C position provides electrical 
power to the thermostatically controlled C heaters. The OFF 
position removes electrical power from the heaters. 

The TOPPING EVAPORATOR HEATER L (left) and 
R (right) NOZZLE switches on Panel LI provide electrical power 
to the topping evaporator left and right nozzles. The L and R 
AUTO A position provides electrical power to the left and 
right A nozzle heaters to maintain nozzle temperatures between 
4 o and 2loC (40o and 70oF). The L and R AUTO B position 
provides electrical power to the left and right B nozzle heaters. 

The ammonia boilers are used below 36,576 meters (120,000 
ft) during entry. There are two individual storage and control sys¬ 
tems that feed a boiler containing common ammonia passages 
and individual Freon-21 coolant loop passages. This provides a 


safe return from orbit for any combination of failures in both the 
Freon-21 coolant loops and ammonia boilers. The ammonia 
boilers are enabled by the NH 3 CONTROLLER A and B switches 
on Panel LI. The NH 3 CONTROLLER A and B switches are 
positioned to PRI (primary)/GPC before entry. As the orbiter 
descends through 36,576 meters (120,000 ft), the BFS com¬ 
mands controller A and B on. The ammonia (NH 3 ) boiler is a 
shell-and-tube type with a single pass on the ammonia side and 
two passes for each Freon-21 coolant loop. The NH 3 flows in the 
ammonia tubes and the Freon-21 coolant loops flow over the 
tubes, cooling the Freon-21. Freon temperature is maintained at 
1.1°C (34oF) by regulating the flow of NH 3 through the boiler. 
At each Freon-21 coolant loop outlet of the ammonia boiler, 
Freon-21 temperature is monitored by three temperature sensors. 
One sensor is associated with the primary NH 3 flow control valve 
of that loop and another with the secondary NH 3 flow control 
valve. The third sensor automatically switches control from the 
primary to secondary system in the event of low Freon-21 coolant 
loop outlet temperature. The NH 3 boiler exhaust is vented over¬ 
board in the aft section of the orbiter adjacent to the bottom 
right side of the vertical tail. The boiler continues to operate and 
provide heat rejection until a ground cooling cart is connected to 
the GSE heat exchanger after touchdown. 

The NH 3 CONTROLLER A and B switch positioned to 
SEC (secondary) ON provides electrical power directly to the 
NH 3 controllers and boiler, which operates the NH 3 boiler. The 
OFF position removes electrical power from the NH 3 controllers 
and boiler. The two complete ammonia boiler systems each have 
an ammonia storage tank. The capacity of each tank is 29 kilo¬ 
grams (64.7 lbs). There is about 20 kilograms (46 lbs) usable for 
each system. Each ammonia tank is pressurized with helium at an 
operating pressure between 4,295 and 28,462 mmHg (83 to 
550 psi). There are three valves in the plumbing leading to each 
ammonia boiler. The isolation valve is opened by the primary or 
secondary controller. The next two control valves in line are 
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modulating valves whose position is dependent on the amount of 
current to the control motor. The full closed position of these 
two valves inhibits about 75 percent of the flow. The fail mode 
of the control valves is open. If the fault circuitry detects the 
Freon-21 outlet temperature below minus 0.4OC (31.25°F) for 
greater than 10 seconds, an automatic switchover occurs in the 
controller for that NH 3 system and the secondary controller 
takes over. A relief valve provides over pressurization protection 
for each ammonia tank. 

Freon Coolant Loops No. 1 and 2 are routed from the flash 
evaporator in series, then into parallel paths. A portion of the 
Freon-21 loop is directed to the aft avionics bays in the aft 
fuselage of the orbiter, where some of the electronic avionics 
units in Avionics Bays 6 , 5 and 4 are mounted on coldplates 
which transfer the heat generated from the electronic avionics 
units to the Freon-21, which carries the generated heat away. 
The Freon-21 coolant loops also flow through the coldplates of 
Rate Gyro Assemblies 1, 2, 3 and 4. 

The remaining parallel path downstream of the flash 
evaporator heats oxygen by means of a heat exchanger to 4.4°C 
(40°F) prior to entering the cabin. The source of the oxygen is 
the cryogenic storage and distribution system. This path branches 
in parallel at the flow proportioning valve in each Freon-21 loop. 

The FLOW PROP (proportioning) VLV (valve) switch on 
Panel LI for each coolant loop controls the flow of Freon-21 to 
the payload heat exchanger or the water/Freon-21 interchanger. 
The INTCHGR (interchanger) position of the LOOP 1 and 
LOOP 2 switches controls the respective flow proportioning 
valve to allow maximum Freon-21 flow through the water/ 
Freon-21 interchanger. The PAYLOAD HX (heat exchanger) 
position of the LOOP 1 and LOOP 2 switch controls the 
respective flow proportioning valve to allow maximum Freon-21 
flow through the payload heat exchanger. The indicator above 


the respective LOOP 1 and LOOP 2 switch on panel 01 
indicates ICH when the water/Freon interchanger position, 
BARBERPOLE when that valve is in transit from ICH or PL, and 
indicates PL (payload) when that valve is in the payload heat 
exchanger position. 

The parallel paths from the water/Freon-21 interchanger 
and payload heat exchanger are reunited with the parallel path 
from the aft avionics bay and rate gyro assemblies. The coolant 
loop then returns to its Freon-21 coolant pump. 

The accumulator in each Freon-21 coolant loop is a metal, 
bellows-type pressurized with gaseous nitrogen. The accumulator 
provides for thennal expansion and keeps a positive suction on 
the coolant pumps. 

The Freon-21 coolant loop temperature and flow rate are 
monitored on Panel 01. When the FREON FLOW EVAP OUT 
TEMP switch is positioned to LOOP 1 or LOOP 2, the 
respective Freon-21 coolant loop evaporator outlet temperature 
is monitored on the FREON EVAP OUT TEMP in degrees 
Fahrenheit and the Freon flow is monitored on the FREON 
FLOW in PPH (pounds per hour). This information is also 
transmitted to the RED FREON LOOP caution and warning light 
on Panel F7. The RED FREON LOOP light would illuminate if 
the Freon-21 Coolant Loop No. 1 or 2 evaporator outlet 
temperature fell below 0°C (32°F) or rose above 15.6°C(60°F) 
or if the Freon-21 flow rate is below 544 kilograms (1,200 lbs) 
per hour. 

During the development flights of Orbiter 102, a separate 
development flight instrumentation (DFI) Freon-21 coolant loop 
system is installed in the payload bay for cooling the electronic 
units installed on the DFI pallet in the payload bay. The DFI has 
its own Freon-21 pumps, accumulator and plumbing. The DFI 
Freon-21 coolant loop is cooled by the payload bay heat 
exchanger. The DFI FREON PUMPS SELECT switch is located 
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on Panel Rll. Position 1 controls pump No. 1 and position 2 
controls pump No. 2. 

FOOD, WATER AND WASTE MANAGEMENT 

The food, water, and waste management (FWW) subsystem 
provides the basic life support functions for the flight crew. 

Each potable water tank has a usable capacity of 74 
kilograms (165 pounds), is 901 millimeters (35.5 inches) in 
length and 393 millimeters (15.5 inches) in diameter, and weighs 
17.9 kilograms (39.5 pounds) dry. 

Potable water is generated by the three fuel cells at a maxi¬ 
mum of 11.34 kilograms (25 lbs) per hour. The hydrogen- 
enriched water from the fuel cell passes through a hydrogen 
(H2) separator, where 95 percent of the excess hydrogen is 
removed. The H2 separator consists of a matrix of silver palla¬ 
dium tubes which have an affinity for H2- The H2 is dumped 
overboard through a vacuum vent. 

The water from the H2 separator is directed to the water 
storage system, which can consist of a total of six tanks for the 
development flight test missions. The tanks are identified as A, 
B, C, D, E and F. Tanks E and F are located on the mid deck 
of the crew module cabin for the development flights of 
Orbiter 102. Each tank has a solenoid inlet and outlet valve 
except Tanks E and F, which have manual valves. Water for 
Tank A passes through a microbial check valve. The microbial 
check valve adds approximately 3-5 parts per million iodine to 
the water. The water from the microbial check valve is directed 
to Tank A and the galley. The crew can select cooled or ambient 
water. Cooling is accomplished by passing through the water 
chiller, where heat is rejected to the water coolant loop. 



When the Tank A inlet valve is closed or Tank A is full, the 
water is directed through a 77 mmHg (1.5 psi) relief valve which 
routes the water to Tank B. 

When the Tank B inlet valve is closed or Tank B is full, the 
water is directed through another 77 mmHg (1.5 psi) relief valve 
to Tanks C, D, E and F. The inlet and outlet valves for each tank 
can be opened or closed selectively to use water; however, the 
Tank A outlet valve fill always remains closed since the water has 
been treated by passage through the microbial filter for crew 
consumption. 

The controls for the water supply system are located on 
Panels R12 and ML31C. Tanks A, B, and C are controlled from 
Panel R12, Tank D from Panel ML31C, and Tanks E and F from 
manual valves on the tanks. 

Tanks A, B and C have their own SUPPLY H 2 O INLET and 
OUTLET switch on Panel R12. When the SUPPLY H 2 O INLET 
TK A, B, or C switch is positioned to OPEN, the inlet valve for 
that tank allows water into the tank. If positioned to CLOSE, 
the inlet valve isolates the water inlet from that tank. An indi¬ 
cator located above the respective switch on Panel R12 indicates 
OP (open) when the corresponding valve is open, BARBERPOLE 
when that valve is in transit and CL (close) when that valve is 
closed. Tank D has its own SUPPLY H 2 O TK INLET switch and 
indicator on Panel ML31C and operates in the same manner as 
the ones on Panel R12. 

A SUPPLY H20 GALLEY SPLY (supply) VLV (valve) 
switch on panel R12 permits or isolates water from Tank A 
to the galley. The switch has OPEN and CLOSE positions and 
an indicator above the switch shows whether the valve is open 
or closed or BARBERPOLE when that valve is in transit. 
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Potable Water (Sheet 3 of 3) 
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When the valve is open, water is supplied to an Apollo 
water dispenser and water gun at ambient and chilled tempera¬ 
tures for drinking and food reconstitution. The ambient water 
temperature range is 18 to 35°C (65 to 95°F) and the chilled 
water temperature range is 6 to 13°C (43 to 55°F) for the 
development flight tests. In the operational flights, the water 
supply to the galley is directed to a hot water heater, which 
provides hot water at a temperature range between 68 and 73°C 
(155 to 165°F). Chilled water is supplied at the galley at a 
temperature range of 7 and 12°C (45 to 55°F). 

Tank A is used for crew consumption. To prevent contam¬ 
ination the Tank A OUTLET valve will remain closed. Tank B is 
used for flash evaporator cooling on-orbit. Tanks A and B may 
also be dumped overboard as necessary to provide space for 
water storage. Tanks C, D, E, and F are saved full of water for 
contingency purposes. 

Each of the water tanks is pressurized from the nitrogen 
pressure supply system at a pressure of 905 mmHg (17.5 psi) to 
force the water from the water storage tanks for flash evaporator 
use. The H 2 O ALTERNATE PRESS switch on Panel LI provides 
the capability of referencing the water tank pressurization system 
to ambient cabin pressure if the N 2 system fails. If the switch is 
positioned to OPEN, cabin atmosphere pressure is supplied to the 
water tanks for pressurization. The CLOSE position isolates the 
cabin atmosphere pressure from the water tank pressurization 
supply system. 

From the water supply tanks, two evaporator feed lines 
referred to as SYSTEM A and SYSTEM B are routed to the flash 
evaporators in the aft fuselage. A crossover valve between the 
two supply systems is controlled by a SUPPLY H 2 O CROSSOVER 
VLV switch on Panel R12. If the switch is positioned to OPEN, 
the crossover valve allows all six water tanks for the flash evapo¬ 
rator or overboard dumping. When the switch is positioned to 
CLOSE, the crossover valve is closed, and Tanks C, D, E and F 


cannot be used for the flash evaporator A water supply. But by 
opening the B supply isolation valve, these tanks can flow to B 
water supply and, thus, the flash evaporator. An indicator above 
the switch indicates OP (open) when the valve is open, CL (close) 
when the valve is closed, and BARBERPOLE when the valve is in 
transit. 

The water supply system B to the flash evaporator has an 
additional supply isolation valve. This valve is controlled by the 
SUPPLY H 2 O B SPLY (supply) ISOL VLV switch on Panel R12. 
An indicator above the switch on Panel R12 indicates the same as 
in the previous paragraph. 

Water from Tank A, when full, and Tank B can also be 
dumped overboard. The overboard dump consists of a dump 
isolation valve in the crew module cabin and a dump valve in the 
mid fuselage. Both valves are closed unless performing a dump. 
The SUPPLY H 2 O DUMP ISOL VALVE switch on Panel R12 
opens and closes the dump isolation valve in the crew module 
cabin. The SUPPLY H 2 O DUMP VLV switch on panel R12 
controls the dump valve in the mid fuselage. Indicators above 
the switches indicate OP (open) when the valves are open, CL 
(close) when the valves are closed, and BARBERPOLE when the 
valves are in transit. 

The water dump nozzle has a heater to prevent freezing. 
The heater is controlled by the DUMP VALVE ENABLE/ 
NOZZLE HEATER switch on Panel R12. The nozzle heater is 
powered when the switch is positioned to ON. 

There are thermostatically controlled line heaters upstream 
of the water dump nozzle on the line. The heaters are powered 
by circuit breakers H 2 O LINE HTR A and B on Panel ML86B. 

The system A and B water feedlines to the flash evaporator 
are approximately 30 meters (100 ft) long. Redundant heaters 
installed along the length of the water lines are controlled by the 
FLASH EVAP FEEDLINE HTR switches on Panel L2. The 
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switch enables the thermostatically controlled heaters on H 2 O 
system A and B. Heater circuit one or two on PR1 then A or B 
may be selected. The OFF position of either switch removes 
electrical power from the heaters. 

The orbiter is equipped with food and facilities for food 
stowage and preparation and dining to provide each crew mem¬ 
ber with three meals plus snacks per normal day in orbit; two 
meals on launch day; one meal on reentry day; and an additional 
96 hours of contingency food. The food supply and food prepa¬ 
ration facilities are furnished by the government and are designed 
to accommodate variations in the number of crew and duration 
of flight, ranging from a crew of two for one day to a crew of 
seven for 30 days. 

In the development test flights, the food preparation system 
is limited. It consists of the water dispenser, food warmer, food 
trays, food (meal menu and pantry), and food system accessories. 

The food warmer is a small, portable, thermostatically con¬ 
trolled unit that can warm meals for two crew members simul¬ 
taneously. The food trays serve as a dining surface with restraints 
for food items and provide each crew member with associated 
dining accessories. The food consists of individually packaged 
items of dehydrated, thermo-stabilized, irradiated, intermediate 
moisture, natural form and beverage form. Meal accessories 
include salt, pepper, sauces, etc., as well as candy, gum, vitamin 
tablets, wipes, utensils, thermal pads, drinking containers, and 
germicidal tablets. 

For the operational flights, the food preparation system 
consists of the galley, food trays, work/dining table, food, and 
food system accessories. 

The galley is a multi-purpose facility that provides food 
preparation facilities, stowage of meal accessories, food trays and 
oven inserts, and food, and volume for seven crew member days 



Crew Cabin Mid Deck Potable Water Tanks 
(Development Flight Tests) 


of food-related trash. The food consists of individually packaged 
items of rehydratable, thermo-stabilized, and ready-to-eat food 
and beverages. 

The food warmer will heat a meal for two crew members in 
approximately two hours in the development flight tests. 

The oven will heat a meal for up to seven in approximately 
90 minutes and has a heating range of 62 to 85°C (145 to 
185°F) in the operational flights. 

The waste management system collects, processes, and 
stores solid and liquid wastes. Liquid waste consists of urine, 
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Galley and Hygiene (Operational Flights) 


perspiration, lung vapor, and liquid waste from the galley and 
extravehicular mobility unit (EMU). Solid waste consists of 
feces, emesis, tissues, etc. The waste collection system collects 
and processes these wastes in zero gravity. 

The waste collection system is located in the mid deck of 
the orbiter crew compartment in a 736-millimeter (29-inch) wide 
area immediately aft of the crew side hatch. The unit is 685 x 
685 x 736 millimeters (27 by 27 by 29 inches) and has two 
major independent and interconnected assemblies: one handles 
fluids and the other (commode) the solid waste. 

The fluid processing assembly collects liquid waste from the 
urinal, personal hygiene station or EMU (extra-vehicular mobility 
unit). The urinal assembly is a flexible hose with a cup that can 
be used in a standing position or be attached to the commode by 
a pivoting mounting bracket for use in a seated position. The 
urinal is a contoured cup that can accommodate both males and 
females. 

The urinal can be used sitting or standing by either male or 
female crew members. The user positions the waste collection 
system (WCS) control panel MODE switch to the WCS/EMU, 
which opens the fan separator valve 1 or 2and turns fan separator 
1 or 2 on, dependent upon the WASTE COLLECTION SYSTEM 
FAN SEP switch in position 1 or 2, opens the fan separator 
control valve, and opens the urine collection valve. The 
COMMODE CONTROL handle is positioned to OFF, which 
allows the commode outlet control valve port to vent to the WSC 
VACUUM VALVE in the OPEN position to expose the wastes in 
the commode to vacuum for drying, and the ballast air control 
valve is open. The airflow in the urinal and the ballast airflow 
enter the system via the debris screen inlet, orifice and ballast air 
control valve. The ballast air mixes with the urine transport air 
flow in the fan-separator. The air/liquid mixture is drawn into 
the fan separator by the fans. The air/fluid separation takes place 
in the fan separator. The air/fluid mixture in the fan separator is 
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Seat 


Odor/Bacteria Filter 
Commode Operating Handle 


Waist Restraint 

Urinal 

Handhold 

Foot Restraint 


Fan Separator Selector Switch 



Odor/Bacteria Filter Spare Fecal/Vomitus Bag 

Location of Waste Collection in Mid Deck 



COMMODE OPERATION 


Pulling up gate valve control 
activates slinger motor. 

As slinger reaches operational 
speed (1500 rpm), hinged 
slinger tines unfold outward. 
Pushing gate valve control 
forward opens gate valve 
for commode use. Feces 
enters commode through seat 
opening, drawn in by ballast 
air flow. Slinger tines shred 
feces and deposit it in thin 
layer on commode walls. 
Tissues move up over slinger 
tines and settle at bottom of 


collector. Ballast air passes 
through debris filter and 
hydrophobic filter to fan 
separators. 

For emesis disposal, fecal/ 
emesis selector switch on 
WCS control panel is moved to 
emesis position, rotational 
speed of slinger tines is 
slowed and tines do not unfold. 
This allows unobstructed 
passage of fecal/vomitus bag 
into commode. 


Waste Collector 
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Waste Collection (Sheet 1 of 2) 
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conveyed axially in the rotating chamber and centrifugal force 
draws the fluid along the outer walls of the chamber. A 
stationary pitot tube picks up the fluid and pumps it to the waste 
water tank. The air is drawn axially out of the rotating chamber 
by blower action and passes through a filter which removes all 
bacteria and odors before returning the air into the cabin. An 
EMU water dump is accomplished in the same manner. 

Wash water removal from the personal hygiene station 
(PHS) is accomplished in the same manner, except the WASTE 
COLLECTION SYSTEM MODE switch is positioned to PHS. 
This portion of the system is inactive for the development flight 
tests. 


The check valves at the waste water outlet from the fan 
separators provide back pressure for proper separator operation 
and prevent back-flow through the inactive separator. 

The urine and feces collection mode is accomplished by 
using the foot restraints, sitting on the commode, locking the 
restraint belt, and positioning the urinal. 

The WCS VACUUM VALVE is positioned to open, opening 
the vacuum vent valve. This operation is performed prior to the 
first usage and reversed subsequent to the last usage. The 
WCS/EMU MODE switch is positioned to WCS/EMU as in the 
urine collection mode. The COMMODE CONTROL handle is 
pulled up, which closes the commode outlet control valve port 
to the vacuum vent and opens the commode control valve and 
commode pressurization valve to pressurize the commode from 
the cabin, and the ballast air control valve is open. The WASTE 
COLLECTION SYSTEM SLINGER switch is positioned to the 
FECES position, which operates the slinger in the commode at 
the high speed. After 10 seconds the COMMODE CONTROL 
handle is positioned FORWARD to open the gate valve, opening 
the collector for use. The equipment is used as a normal toilet, 
including toilet wipes. The urine is collected as in the urine 


collection mode and the feces and tissue are conveyed into the 
commode. 

The solids/air mixture is accelerated onto the rotating 
slinger, where the tines shred the feces and accelerate the wastes 
to the commode inner wall, where it adheres in a thin layer 
around the periphery. The tissue is not shredded but slides up 
and over the rotating tines and into the storage volume. Air is 
drawn through the collector by the fan/separator and returned to 
the cabin through the odor/bacteria filter. 

The deactivation of urine and feces collection would be 
done in reverse procedure. Emesis collection is accomplished in 
the same manner as feces collection, except the EMESIS/FECES 
switch is positioned to EMESIS. The EMESIS position slows the 
rotation of the slinger allowing the slinger tines to remain folded 
against the plate, which clears the passage from the commode 
inlet to the exterior of the commode storage compartment. After 
use, the emesis bag is sealed and lowered into the open commode 
inlet and the bag moves into the storage area. 

When the waste collection system is not in use, the commode 
is exposed to space vacuum. The COMMODE CONTROL handle 
on OFF opens the commode through the commode outlet con¬ 
trol valve port to the WCS VACUUM VALVE, which is posi¬ 
tioned to OPEN to dry and disinfect the wastes. The WASTE 
COLLECTION SYSTEM MODE switch positioned to OFF closes 
the urine collection valve and fan separator outlet control valve. 

The commode has a storage capacity equivalent to 210 
crew-member days of vacuum-dried feces and toilet tissue. Each 
crew member-day usage results in 0.12 kilogram (0.27 pound) of 
fecal and paper waste, including 0.09 kilogram (0.2 pound) of 
moisture. The commode can accommodate up to four usages per 
hour. 


Heaters are installed on the vacuum vent line and are 
thermostatically controlled. Heaters are also installed on the 
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vacuum vent nozzle and are enabled by the WASTE H 2 O VAC 
VENT NOZZLE HEATER switch on panel ML31C when posi¬ 
tioned to ON. The WCS waste gases are vented overboard 
through the vacuum vent line and nozzle. 

Personal hygiene accommodations for the crew include a 
personal hygiene station, personal hygiene kits, pressure- 
packaged personal hygiene agents, towel dispenser, and tissue 
dispenser. 

In the development flight tests, the personal hygiene station 
is located in the mid deck of the crew cabin and provides 
ambient temperature water with no drain. The operational flight 
personal hygiene station is on the aft side of the galley in the mid 
deck of the crew cabin and provides ambient and hot water plus 
a drain to the urinal assembly. 

Personal hygiene kits provide for brushing teeth, hair care, 
shaving, nail care, etc. Pressure-packaged personal hygiene agents 
are for cleaning hands and for cleaning hands, face, and body. A 
seven-day supply of towels is provided for each crew member; 
additional towel dispensers are provided for each crew member 
for each additional seven days. Tissues are provided to support 
each crew member for seven days and dispensers' are added for 
each seven days added to a mission. 

In the operational flights, two privacy curtains are attached 
to the waste collection compartment door. One is attached to the 
top of the door and interfaces with the edge of the inter-deck 
access. The other is attached to the door and interfaces with the 
galley. The deployed curtain isolates the waste collection com¬ 
partment and galley personal hygiene station from the rest of the 
orbiter mid deck. 

The waste water tank receives waste water from the ARS 
crew compartment humidity separator and the waste collection 
system urine separator. 
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The waste water tank usable capacity is 74 kilograms (165 
pounds). It is 901 millimeters (35.5 inches) in length and 381 
millimeters (15 inches) in diameter and weighs 17.9 kilograms 
(39.5 pounds) dry. 

The waste water tank is pressurized with the same gaseous 
nitrogen source supply as the potable water tanks. The waste 
water tank has an inlet and outlet valve. The outlet valve is 
opened only for ground servicing and controlled by the WASTE 
H 2 O TK/DRAIN VALVE switch on panel ML31C. The valve is 
opened when the switch is positioned to OPEN and closed when 
OP (open) when the valve is open, CL (close) when the valve is 
closed, and BARBERPOLE when the valve is in transit. 
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The inlet valve permits waste water from the cabin heat 
exchanger humidity separator and waste fan/separators to enter 
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the waste tank. The inlet valve is controlled by the WASTE H 2 O 
TANK 1 VLVE switch on Panel ML31C. The switch opens and 
closes the valve. An indicator above the switch indicates the 
position of the valve in the same manner as the previous 
paragraph. 

In order for waste water to be dumped overboard, the dump 
isolation valve must be opened. The dump isolation valve is 
controlled by the WASTE H 2 O DUMP ISOL VLV switch on 
Panel ML31C. An indicator above the switch indicates the 
position of the valve in the same manner as the previous 
paragraph. 

A redundant waste water dump valve must also be opened 
to dump waste water overboard. This valve is controlled by the 
WASTE H 2 O DUMP VALVE switch on panel ML31C. The 
WASTE H 2 O DUMP ENABLE/NOZ HTR switch must be on 
before the dump valve can be activated. An indicator above the 
switch indicates the position of the valve in the same manner as 
the previous paragraph. 

A heater installed on the waste water dump nozzle is turned 
on and off by the WASTE H 2 O DUMP VLV ENABLE/NOZ 
HTR switch on Panel ML31C. Heaters are installed on the waste 
water dump line and are thermostatically controlled. 

Waste water tanks may be added in parallel if a mission 
requires additional stowage of waste water. The potable water 
tanks have a similar overboard dump capability. 

AIRLOCK SUPPORT SUBSYSTEM 

The airlock eliminates the necessity for crew compartment 
depressurization for extra-vehicular activity (EVA) and Spacelab 
operations that require crew/equipment transfer from the crew 
cabin to the payload bay or to the Spacelab. 
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Airlock 

The airlock is normally located in the mid deck of the crew 
cabin. It will contain two pressure sealing hatches. The airlock 
may also be located in one of two additional locations. The 
airlock may be moved from inside the mid deck of the crew 
cabin and positioned outside the aft bulkhead of the crew cabin 
in the payload bay area to provide additional volume in the mid 
deck. When the airlock is in the payload bay, insulation is 
installed on the exterior of the airlock for protection against 
temperature extremes. 
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If Spacelab is in the payload bay, a transfer tunnel and 
adapter enables the crew members and equipment to be trans¬ 
ferred between Spacelab and the crew cabin. The tunnel mates 
with a tunnel adapter at the forward end of the payload bay. 
For EVA, the airlock is positioned on top of the tunnel adapter 
and stabilized through a structural connection to the crew com¬ 
partment aft bulkhead. The tunnel adapter will have two access 
hatches: one on top of the adapter for access to the airlock and 
the other on the aft end for access to the Spacelab. 

For missions requiring direct docking of two vehicles, a 
docking module can be substituted for the airlock and installed 
on the tunnel adapter. The docking module is extendable and 
provides an airlock function for EVA for two crew members 
when extended or for one crew member when retracted. 

The airlock has an inside diameter of 1600 millimeters (63 
inches), is 2108 millimeters (83 inches) long, and has two 
1016-millimeter (40-inch) diameter, D-shaped openings, 914 
millimeters (36 inches) across, plus two pressure sealing hatches 
and a complement of airlock support systems. 

The airlock volume is 4.24 cubic meters (150 cubic feet). 
Airlock repressurization is controllable from inside the crew 
cabin mid deck and from inside the airlock. It is performed by 
equalizing the airlock and cabin pressure with hatch-mounted 
equalization valves. Depressurization is controlled from inside the 
airlock. The airlock is depressurized by venting the airlock 
overboard. 

The airlock provides EVA capabilities up to seven hours and 
suited intra-vehicular activity (IVA) activities. The airlock sup¬ 
port provides airlock pressurization and depressurization, EVA 
equipment recharge, liquid-cooled garment water cooling, pre¬ 
breathing support, EVA equipment checkout, donning, and 
communications. 
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The EVA equipment recharge station provides oxygen, 
water, waste water processing, and battery recharge of the 
extra-vehicular mobility units (EMU’s). Oxygen is supplied to the 
EVA equipment recharge panel from the ARS oxygen supply. 
Potable water is supplied to the recharge panel from the potable 
water system. Waste water processing from the EMU is expelled 
to the waste water system. 

A service and cooling umbilical (SCU) is used to transport 
all supplies (oxygen, H 2 O, electrical, communications, etc.) from 
the airlock control panels to the EMU before and after EVA and 
during EMU recharge. Cooling for the crew is provided by the 
liquid-cooled garment circulation system via the SCU and liquid- 
cooled-garment heat exchanger, which transfers collected heat 
to the Freon-21 coolant loops. 

The EMU’s are worn over a liquid-cooled garment similar to 
a “long john” underwear into which have been woven many feet 
of flexible tubing that circulates the cooling water. 

An EMU power supply/battery charger supplies electrical 
power to the EMU for pre- and post-EVA operations and 
recharge of the EMU batteries between EVA’s. 

PORTABLE OXYGEN SUBSYSTEM 

A portable oxygen system is provided for each crew mem¬ 
ber. The system is used in the event of crew cabin atmosphere 
contamination and for life support during EVA rescue opera¬ 
tions, emergency oxygen after landing if the atmosphere around 
the orbiter is contaminated, and prebreathing for EVA’s for 
denitrogenizing the crew member’s circulatory system. 

The portable oxygen system consists of a full face mask 
with visor, rebreather loop, heat exchanger, oxygen bottle, C02 
absorber, and condensate collector. It operates independently or 
connected to the ARS oxygen system. The portable oxygen 





system rebreather concept limits spillage of oxygen in the crew 
cabin. A communications cable provides the mask with com¬ 
munications capabilities. A recharge kit consists of the CO 2 
absorber cartridge and condensate collector. 

The portable oxygen system provides for three hours of 
operation using the ARS oxygen supply before recharge kit 
replacement. The portable oxygen provides a walk-around 
capability for normal and emergency operation. Its internal 
oxygen supply will provide up to one hour of independent 
rebreather operation when in EVA personal rescue system. After 
the internal oxygen supply is depleted, the portable oxygen 
system can be recharged to provide a 10-minute independent 
walk-around capability in the rebreather mode. 

Oxygen is supplied from the ARS to the portable oxygen 
system through quick-disconnect flexible hoses. 

The development test flights have nine available locations 
for the portable oxygen system: three at the aft center console, 
four on the mid deck, and two in the airlock. The operational 
flights will have 10 portable oxygen system locations available: 
two in the airlock, four on the mid deck ceiling, and four on the 
aft center console. 

Before the EVA’s, the crew member must be denitrogenized 
to prevent the bends when EVA’s are begun in the 212 mmHg 
(4.1-psi) EMU suit. 

If an extra-vehicular activity (EVA) is required to close the 
payload bay doors, crew cabin pressure will be reduced from 
750 mmHg plus or minus 10 mmHg (14.5 plus or minus 0.2 psia) 
to 465 mmHg plus or minus 23 mmHg (9 plus or minus 0.45 
psia) in STS-1 through STS-4 with an 80 percent nitrogen and 
20 percent oxygen (mixed gas) composition by the spacecraft’s 
environmental control life support system (ECLSS) atmospheric 
revitalization pressure control subsystem (ARPCS). 
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Portable Oxygen Systems (Development Flight) 

The reduction of the cabin pressure eliminates the 3 1 /2 to 
4 hours prebreathing of pure oxygen by the two-man flight crew 
to force nitrogen from their blood in preparation for the 100 per¬ 
cent 258 mmHg (5 psia) of the EVA space suits in addition to 
providing a prebreathing atmosphere for both crew members 
simultaneously, thereby facilitating an emergency EVA by the 
second crewman. The reduction of cabin pressure provides posi¬ 
tive denitrogenization and avoids the encumbrance of the port¬ 
able oxygen system and the servicing and cooling umbilical for 
prebreathing, permitting the flight crew to accomplish other pre- 
EVA tasks more effectively. 

If an EVA is required, depressurization of the cabin from 
750 mmHg plus or minus 10 mmHg (14.5 plus or minus 0.2 psia) 









Portable Oxygen Systems (Operational Flight) 

to 465 mmHg plus or minus 23 mmHg (9 plus or minus 
0.45 psia) will be implemented at an interval of 12 to 67 hours 
prior to the EVA. 


During depressurization, the total cabin pressure and 
oxygen partial pressure are controlled manually by the flight 
crew. The cabin pressure reduction results in an oxygen concen¬ 
tration of up to 30 percent. Appropriate analyses and tests are 
being conducted on equipment and materials to verify their 
performances in the reduced pressure environment. 

During the period of cabin pressure reduction, a procedural 
powerdown is necessary to maintain operational cabin and 
avionics temperature levels because of the reduced air cooling 
capability. 
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EJECTION ESCAPE SUIT 

The ejection escape suit (EES) provides the crew member 
with a safe environment in the event of crew ejection from the 
orbiter during high speed - maximum of Mach 2.7 — and high 
altitude - maximum of 24,384 meters (80,000 feet) - in the 
development flight tests. 

The pressure portion of the EES is a five-layer integral unit 
covering the torso to the neck, the arms above the wrists, and the 
legs, including the feet. The EES includes a helmet, gloves, boots, 
and outer garment. 

The EES is donned in preflight phase, removed in orbit, and 
donned again before descent and worn until after landing. 

Regulated oxygen is supplied to the EES helmet by means 
of a regulator/valve/manifold assembly. The oxygen supply is 
derived from the power reactant storage and distribution cryo¬ 
genic system, from the ECLSS ARS emergency breathing oxygen 
supply, or from the crew member ejection seat oxygen emer¬ 
gency supply during crew ejection. A portable ventilator system 
is used with the suit before crew members enter the orbiter. 

The suit weighs approximately 10 kilograms (23.5 pounds). 

The escape suit ventilation system (ESVS) provides ventila¬ 
tion for the EES. Air is drawn from a manifold supplying con¬ 
ditioned cabin air from the ECLSS air circulation duct located 
in the crew cabin mid deck sleep area. The air is drawn by two 
compressors and discharged through a check valve to a common 
manifold for the commander and pilot. The check valve prevents 
a reverse flow of air in event of a compressor failure. The com¬ 
pressors are located on the crew cabin flight deck immediately 
behind the ejection seat. The discharge port at the common 
manifold is connected to the commander’s and pilot’s suits by 
flexible hose at the suit ventilation fitting. 




Face Barrier 


Visor Bal/ Locking Bar 
Microphone 

Oxygen Cut-Off Valve 
(02 flow stop* when 
faceplate is open) 

Antisuffocation Valve 

h Microphone Adjustment 
Control 

QQL Neck Ring 

■b Koch Fittings 

PJJl Helmet 
fl| Holddown 

PUpp Communications 
Cab,e 

Vent Hose 

i fPS&r Fitting 


Faceplate/Visor 

Visor Lock 
Drink Port 
Helmet Lock 


Life Preserver 
Unit <LPU) 


Suit Pressure 
Controller 


Helmet 
Oxygen Hoses 
{Disconnects) 


Anti-g Suit Hose/ 
T-Connector 


Biomedical 

Cable/Connector 


Gloves 


Integrated Harness 


Lapbelt Fitting 
(D-Ring) 


Pockets 


Anti-g Suit Control 


Pressure 

Suit 


Leather Safety 
Flying Boots 


Ejection Escape Suit 


328 


) 


) 








Space Shuttle Spacecraft Systen 



The EES face area is separated from the rest of the suit by a 
barrier that seals around the face. The barrier exhalation valve 
exhales gas into the torso area. From the torso area, the air and 
exhaled gas exit through a chest-mounted pressure controller. 
When the suit ambient pressure lowers to 165 to 175 mmHg 
(3.2 to 3.4 psi), the controller closes to maintain suit pressure at 
this level. 


The EES also has a communication system. 

ANTIGRAViTY SUIT 


The antigravity suit (AGS) is a separate unit but it cannot 
be operated without the EES in the development flight tests. 

The AGS prevents pooling of body fluids and aids in 
maintaining circulating blood volume. Pooling of body fluids can 
occur when high “g” loads are imposed on the body. It is par¬ 
ticularly noticeable after crew members have had more than 
three days of zero “g” activity. 

For the development flight tests, bladders in the AGS 
receive oxygen from the power reactant storage distribution 
cryogenic system, ECLSS ARS emergency oxygen system, or the 
ejection seat emergency oxygen supply. When the bladders of the 
AGS are activated, pressure is applied to the crew member’s 
lower extremities and to the abdomen to prevent the pooling of 
body fluids. 

The AGS weighs 2.2 kilograms (5 pounds). 

The AGS will be worn for entry in the operational flights, 
and the configuration will be supplied at a later date. 

Contractors involved with the ECLSS are Hamilton 
Standard Division of United Technologies Corp., Windsor Locks, 


CT (atmospheric revitalization, Freon-21 coolant loops, heat 
exchangers, cabin fan assembly, debris trap, CO 2 absorber, 
humidity control heat exchanger, avionics fan, accumulators, 
flash evaporators, water management panel EVA life support 
system and EMU’s); Carlton Controls, East Aurora, NY (atmos¬ 
pheric revitalization pressure control subsystem and airlock 
support components); Aerodyne Controls Corp., Farmingdale, 
NY (water pressure relief valve, oxygen check valve); Aeroquip 
Corp., Marman, Los Angeles, CA (couplings, clamps, retaining 
straps, and flexible air duct); AiResearch Manufacturing Co. 
Garrett Corp., Torrance, CA (ground coolant unit); Anemostat 
Products, Scranton, PA (cabin air diffuser); Arrowhead Products 
Division of Federal Mogul, Los Alamitos, CA (couplings, flex air 
duct, flexible connector, connector drain system convoluted 
bellows); Brunswick, Lincoln, NE (atmospheric revitalization 
oxygen, nitrogen tanks); Brunswick, Circle Seal, Anaheim CA 
(water reliel valve, water check valve); Brunswick Wintec, El 
Segundo, CA (water relief valve, water check valve, water filter); 
Consolidated Controls, El Segundo, CA (unidirectional/ 
bidirectional shutoff valve, water solenoid latching valve); Cox 
and Co.,New York, NY (water relief valve, vent nozzle and port 
heater, water boiler steam vent line heater); Dynamic Corp. 
Scranton, PA (cabin diffuser); Fairchild Stratos, Manhattan 
Beach, CA (ammonia boiler); General Electric, Valley Forge, PA 
(waste collector);Metal Bellows Co.,Chatsworth, CA (potable and 
waste water tanks, flex metal tubes); RDF Corp., Hudson, NH 
(temperature sensor/transducer); Symetrics, Canoga Park, CA 
(Freon fluid disconnects, water boiler quick disconnects); Seaton 
Wilson, Inc., subsidiary of Systran-Donner, Burbank, CA (water 
and coolant system quick disconnects); Tavis Corp., Mariposa, 
CA (Freon flow meter); Tayco Engineering, Long Beach; CA 
(urine, waste water, 0 2 , N 2 waste dump); Titeflex Division, 
Springfield, MA (water coolant flex line); Vacco Industries, El 
Monte, CA (potable water inline pressure relief valve); Vought 
Corp., Dallas, TX (radiators and flow control assembly). 
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AUXILIARY POWER UNIT 


The auxiliary power unit (APU) is a hydrazine-fueled 
turbine-driven power unit and generates the mechanical shaft 
power to a pump that produces pressure for the orbiter’s 
hydraulic system. There are three separate APU’s, three hydraulic 
pumps, and three hydraulic systems, all located in the aft section 
of the spacecraft. 

The APU’s and their fuel systems are isolated from each 
other. The three independent hydraulic systems are connected to 
the main engine thrust vector control (TVC) switching valve 
actuators and the aerosurface actuator switching valves. Thus a 
single system failure will not affect full operational performance. 
If two systems fail, the third system will provide sufficient 
hydraulic power to operate all actuators at a reduced rate. 

The three APU’s/hydraulic pumps operate during launch 
and boost. They provide the three main engines with propellant 
valve control, thrust vector control by hydraulicaUy gimbaling 
the three main engines, and control of the orbiter hydraulic 
actuators of the aerosurface elevons for aerodynamic elevon load 
relief during boost. 

The APU’s and pumps are restarted prior to deorbit and 
operate continuously through landing and rollout for hydraulic 
positioning of orbiter aerosurfaces (elevons, rudder/speed brake, 
body flap) during the atmospheric flight portion of entry and to 
provide hydraulics for nose and main gear deployment, nose ger 
wheel steering, and main landing gear braking. 

Except for on-orbit checkout, the APU/hydraulic pump r 
dormant during the orbital flight phase. 


The three APU’s are located in the orbiter aft fuselage. Each 
system consists of a fuel tank, a fuel feed system, an APU and 
controller, an exhaust duct, lube oil cooling system, and 
fuel/lube oil vents and drains. Redundant electrical heater 
systems and insulation thermally control the system above 7°C 
(45°F) to prevent fuel freezing and provide required oil viscosity. 
The insulation is used to minimize the electrical heater size and 
to control high surface temperatures to safe limits on the turbine 
and exhaust ducts. 

Each APU fuel system provides fuel to its respective fuel 
pump and control valves, then to the gas generator. Gas generator 
catalytic action decomposes the fuel and the resultant hot gas 
drives the APU two-stage turbine. The APU turbine assembly 
provides mechanical power to the APU gearbox which drives the 
APU fuel pump, hydraulic pump, and oil lube pump. The APU 
lube oil system is circulated through a lube oil heat exchanger in 
the APU/hydraulic water spray boiler to cool the lube oil system. 
The turbine exhaust of each APU flows over the exterior of the 
gas generator exterior, cooling it, and then is directed overboard 
through an exhaust duct at the upper portion of the aft fuselage 
near the vertical stabilizer. 

The APU fuel tanks are mounted on supports cantilevered 
from the sides of the internal portion of the aft fuselage. The fuel 
is hydrazine (N 2 H 4 ), a liquid, earth-storable fuel. The fuel tank 
incorporates a diaphragm at its center and is serviced with fuel on 
one side and the pressurant (gaseous nitrogen) on the other. The 
nitrogen provides the force acting on the diaphragm (positive 
expulsion) to expel the fuel from the' tank to the fuel 
iistribution lines and maintain a positive fuel supply to the APU 
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APU, Water Spray Boiler, and Hydraulic System Schematic 
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Auxiliary Power Unit 

throughout its operation. Each fuel tank is serviced with 
158 kilograms (350 pounds) of fuel to satisfy APU operating 
requirements for all missions. 

Each of the three APU’s is 508 millimeters wide, 553 
millimeters high, and 457 millimeters deep (20 x 21.80 x 18 
inches). Each of the three APU controllers is 152 millimeters 
wide, 193 millimeters high, and 482 millimeters long (6 x 7-1/2 
x 19 inches). 

The rated horsepower of each APU is 135. The weight of 
each is approximately 39 kilograms (88 pounds), with its 
controller weighing approximately 6.8 kilograms (15 pounds). 

The fuel tanks are 711-millimeter (28-inch) diameter spheres. 
Fuel tanks No. 1 and No. 2 are located on the left (minus Y) side 


1 
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APU Heater System and APU Fuel System 
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APU Heater System and APU Gearbox 




























































































































































































































Space Shuttle Spacecraft Systems 



of the orbiter’s aft fuselage, and tank No. 3 is located on the 
right (plus Y) side. The fuel tanks are serviced through fill and 
drain couplings bolted to the corresponding APU servicing panel 
which is located on the side of the fuselage. The nitrogen service 
connections are located on the same panel. The initial gaseous 
nitrogen pressure is 17,077 mmHg (millimeters of mercury) 
(330 psi). 


All APU system controls and displays are located on flight 
deck panels. The temperature and nitrogen pressure in each fuel 
tank is monitored and processed through the orbiter’s system 
management general-purpose computer (GPC) and transmitted to 
the APU FUEL/H 2 O QTY display on Panel F8. If the display 
select switch is in the FUEL position, the quantities in APU fuel 
tanks 1, 2, and 3 are displayed simultaneously on the display 
meter in percent (%). (When switch and display nomenclature is 
printed in all caps—e.g., APU FUEL/EbO QTY—it indicates that 
it is the exact way it appears on the display and control panel.) 


The fuel distribution system supplies the fuel from the fuel 
tank to the APU. Filters are incorporated in the distribution line 
to remove particles before the fuel arrives at the APU. The fuel 
distribution line branches into two parallel paths downstream of 
the fuel tank and filter. An isolation valve is installed in each of 
these paths, which converge into a single path immediately 
downstream of the valves. These valves are installed to isolate the 
fuel tank supply from the APU. The valves are controlled by the 
applicable system APU FUEL TK VLV switch located on 
Panel R2. The fuel tank isolation valves are open for APU 
operation and closed when the APU is not in operation. The 
valve internal design contains a reverse relief feature to allow 
relief of pressure trapped in the line when both APU fuel tank 
valves are closed. The relief feature will function if the 
downstream pressure increases to a pressure range of 20,700 to 
25,875 mmHg (400 to 500 psi). 
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The fuel/nitrogen fill, drain/vent, and test point couplings 
permit servicing and ground checkout of the fuel distribution 
system. The lube oil system couplings permit servicing and 
checkout of the lube oil system. 

The APU CONTROL POWER switch for each APU also is 
located on Panel R2. The switch applies or removes 28 Vdc (volts 
direct current) power to individual APU controllers. Each APU 
controller provides the checkout logic prior to starting the APU, 
detects malfunctions, and controls the APU turbine speed, 
gearbox pressurization, and fuel pump/gas generator heaters 
when the APU is not operating. In the OFF position, power is 
removed from the controller. 

The APU HEATER GAS GEN/FUEL PUMP switch for each 
APU is located on Panel A12. When the switch is positioned to 
AUTO A or AUTO B, electrical power is provided to the fuel 
pump and gas generator heaters for each APU. The fuel pump 
temperature is controlled automatically by thermostats which 
prevent the fuel from freezing. The thermostats are set to cycle 
on/off between 26 and 38°C (80-100°F). The gas generator 
heaters are on when the switch is in AUTO A or AUTO B prior 
to the start of the APU. When the APU is initiated, the APU 
controller automatically turns off both gas generator and fuel 
pump heaters. The OFF position removes power from heater 
circuits. 


The APU/HYD READY TO START indicator for each APU 
is located on Panel R2. The indicator shows gray when that APU 
is ready to start; that is, when the APU gas generator temperature 
is above 87°C (190°F), turbine speed less than 80%, APU 
gearbox pressure above 284 mmHg (5.5 psi), H 2 O boiler 
controller ready, APU fuel isolation valves open, and hydraulic 
main pump depressurized. When the APU is initiated, and the 


turbine speed is greater than 80 percent of normal speed, the 
indicator will show a barberpole pattern. 

The APU CONTROL START/RUN switch for each APU is 
located on Panel R2. When the switch is in the START/RUN 
position, the APU controller is activated, and the fuel pump and 
gas generator heaters are turned off. The APU is then started by 
the APU controller. The OFF position removes the start signal 
from the APU controller. 

To start, the APU controller opens the normally closed 
secondary valve shutoff of the gas generator valve module and 
fuel flows through the fuel pump bootstrap start bypass circuit 
(the primary fuel control valve of the gas generator valve module 
was already in the open position) to the APU gas generator. Gas 
generator catalytic action decomposes the fuel, creates a hot gas, 
and feeds the hot gas exhaust product to the APU turbine. The 
APU two-stage turbine assembly provides mechanical power to 
the APU gearbox and drives the APU fuel pump. The APU 
turbine must come up to speed in 9.5 seconds or the APU will 
automatically shut down. Because of the gearbox driving the 
APU fuel pump, the pump increased the fuel pressure at its 
outlet and sustains pressurized fuel to the gas generator valve 
module and gas generator. 

The APU SPEED SELECT switch for each APU (Panel R2) 
selects the speed at which each APU controller operates its APU. 
The NORM position controls APU speed at 74,160 rpm, 103 plus 
or minus 8%. The HIGH position controls the APU speed at 
81,360 rpm, 113 plus or minus 8%, with a second backup at 
82,800 rpm, 115 plus or minus 8%. 

When the upper APU turbine speed is reached, the normally 
open port of the primary fuel control valve of the gas generator 
valve module assembly closes, and the normally closed port of 





the control valve opens, allowing the fuel to bypass the fuel 
pump inlet. A relief valve provides pressure relief for the APU 
fuel pump outlet pressure. The APU fuel pump operates at a 
nominal speed of 3,918 rpm and provides a nominal pressure of 
73,485 mmHg( 1,420 psi). 

The APU speed is controlled in the following manner. When 
the lower speed limit is reached, the primary fuel control valve 
opens, allowing fuel to the gas generator; it closes when tire 
upper speed limit is reached, shutting off fuel to the gas 
generator. 


The frequency and duration of primary fuel control valve, 
cycling is a function of the hydraulic load on the APU as well as 
hydraulic system dynamics. 

The secondary shutoff valve of the gas generator valve 
module assembly provides a backup in the event of a malfunction 
of the primary control valve. 

The APU OVERSPEED yellow caution and warning light, 
on Panel F7, will illuminate if APU 1, 2, or 3 turbine speed is 
above 92,880 rpm, 129 plus or minus 1%. The APU UNDER¬ 
SPEED yellow light will illuminate if the turbine speed is less 
than 57,600 rpm, 80 plus or minus 3%, normal speed. 

In the event of an APU overspeed or underspeed shutdown, 
the HYD PRESS yellow light on Panel F7 also would illuminate 
for the corresponding hydraulic system, since the APU driving 
the hydraulic pump for the system would be off; the yellow 
HYD PRESS light illuminates when any hydraulic system drops 
below 144,900 mmHg (2,800 psi). 

The INHIBIT position of the APU AUTO SHUTDOWN 
switch on Panel R2 bypasses the automatic shutdown sequence 


] 




from the APU controllers and the 9.5-second speed time delay if 
the APU CONTROL switch is in the START/RUN position. 

The START ORIDE/RUN position of each APU CONTROL 
switch on Panel R2 will override the APU pre-start conditions 
(gas generator temperature above 87°C, turbine speed less than 
80%, and gearbox pressure above 284 mmHg [5.5 psi]) to permit 
a start of the respective APU, if one or more of the prestart 
conditions are not met. This switch also activates the APU gas 
generator active cooling system which provides the capability to 
restart an APU. The restart is inhibited for 209 seconds after the 
switch is positioned, during which time the gas generator is 
cooled by flowing water through its cooling passages. 

The APU turbine provides the mechanical drive to the APU 
two-stage gearbox to drive the hydraulic pump at a nominal 
speed of 3,918 rpm. In addition to driving the hydraulic pump, 
the output shaft drives the APU fuel pump and the lube oil 
pump. 

Each APU oil lube system uses the power train gears as 
scavenge pumps to supply lube oil to the inlet of the lube pump. 
The lube oil pump increases the lube pressure to a nominal 
3,984 mmHg (77 psi), directs the lube oil through the APU/ 
hydraulic water spray boiler to cool it and returns the lube oil to 
the APU gearbox accumulators. 

The accumulators allow thermal expansion of the lube oil, 
accommodate gas initially trapped in the external lube circuit, 
regulate lube pressure, and act as a zero-gravity, all-attitude lube 
reservoir. The nitrogen pressurization system for each gearbox is 
activated when the gearbox case pressure is below 232 mmHg 
(4.5 psi) plus or minus 77 mmHg (1.5 psi) by the corresponding 
APU controller, assuring that gearcase pressure is sufficiently 
above the requirements for proper scavenging and lube pump 
operation. 
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Each APU turbine exhaust flows over the exterior of the gas 
generator, cooling it, and then is vented overboard through its 
own independent exhaust duct at the upper portion of the aft 
fuselage near the vertical stabilizer. Overtemperature detection of 
each APU exhaust is monitored on display and control Panel F8. 

Each APU turbine exhaust gas temperature, lube oil 
temperature, and fuel pressure is routed to Panel F8. The APU 
SELECT switch position 1, 2, or 3 permits the respective APU 
exhaust gas temperature, fuel pressure, and lube oil temperature 
to be displayed on the APU EGT (exhaust gas temperature), 
FUEL PRESS, and OIL TEMP meter. 

The APU TEMP yellow caution and warning light on 
Panel F7 will illuminate if APU 1, 2, or 3 exhaust gas 
temperature is above 682°C (1,260°F) or if APU 1, 2, or 3 lube 
oil temperature is above 143°C (290°F). 



APU Exhaust and Water Boiler Vent 


The APU HEATER TANK FUEL LINE switches on 
Panel A12 for each APU provide the operation of the thermo¬ 
static controlled heaters located on the respective APU fuel tank 
fuel lines. The thermostats maintain the temperature between a 
nominal 12 and 18°C (55 to 65°F). 

The heaters for the gas generator and the fuel pump and gas 
generator valve module water system are also controlled by the 
APU HEATER TANK FUEL LINE switches on Panel A12. 
Thermostats for the water systems maintain the temperature 
between 26 and 35°C (80 to 90°F). 

The APU HEATER TANK FUEL LINE switches for each 
APU are divided into an A and B system switch for each APU. 
The A switch controls the A heaters and the thermostats provide 
automatic control. The B switch controls the B heaters and the 
thermostats provide automatic control. The OFF position of 
each switch removes power from the respective heater circuits. 

The APU lube oil lines on each APU have a heater system. 
These heaters are controlled by a heater switch for each APU on 
Panel A12. When the HEATERS LUBE OIL LINE switch on 
APU is in the A AUTO position, the A lube oil heaters are 
powered and controlled automatically by thermostats between 
12 and 18°C (55-65°F). The B AUTO heater switch position 
provides the same capability to the B heater system. The OFF 
position of each switch removes power from the heater circuits. 

The APU fuel pump and gas generator valve module is 
cooled by water spray following APU shutdown on completion 
of the ascent boost phase and after orbital checkout. The water 
spray cooling prevents hydrazine decomposition in the APU fuel 
pump and valve due to heat soakback in each APU. The cooling 
system consists of a primary (A) and secondary (B) independent 
water supply to the three APU’s. Each water system consists of a 
419-millimeter (16.5-inch) diameter tank, a 6.35-millimeter 


) 
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(0.25-inch) diameter line to each APU, heaters, and control 
valves. Each water tank is loaded with 9.5 plus or minus 0.2 
kilograms (21 plus or minus one pound) of water. Each tank is 
pressurized with nitrogen between 2,587 and 3,053 mmHg (50 to 
59 psi). The pressure acts on a diaphragm in each tank to expel 
the water into the lines to the control valves. 

When the APU’s are shut down, the APU FUEL PUMP/VLV 
COOL switch A or B on Panel R2 is positioned to AUTO. With 
the A switch on AUTO, the 71-76°C (160 to 170°F) thennostats 
on each APU, through the timer in the water controller for each 
APU, open control Valve A on each APU to permit water to 
spray onto the valve module and fuel pump for 1.25 seconds, 
then close Valve A for 4 seconds, etc. The cooling system is 
activated for two hours and 45 minutes after APU shutdown. 
The B switch controls Valve B in the same manner as in the A 
case. Nitrogen pressurization in each water tank is referred to as a 
blowdown system (pressure decay continues until the water is 
expelled from each tank). The water is exhausted into the aft 
fuselage compartment. 


The gas generator active cooling is used only where the 
normal cooldown time of 180 minutes is not available. This 
provides cooling of the gas generator injector in each APU. The 
injector is cooled by circulation of water through the injector. 
One water tank services all three APU’s. The system consists of 
the one water tank and 29-millimeter (1.18-inch) diameter line 
to each APU, heaters, and a control valve. The water tank is a 
238-millimeter (9.4-inch) diameter tank loaded with 2.72 plus or 
minus 0.2 kilograms (6 plus or minus 0.5 pounds) of water. The 
tank is pressurized with nitrogen at a nominal pressure of 4,398 


) 
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mmHg (85 psi) to expel the water into the lines to the control 
valve. 

When the APU CONTROL switch on Panel R2 for each 
APU is positioned to START ORIDE and the temperature sensor 
for each APU injector is above 212°C (415°F), each APU 
controller opens its water control valve for 209 plus or minus 
5 seconds and directs water into the gas generator injector to 
cool it. When the timer in the APU controller has timed out, the 
control valve is closed. It should be noted that the APU 
CONTROL switch on panel R2 for each APU will not activate 
the water cooling system in the START position. The water from 
the gas generator is exhausted into the aft fuselage. 

The APU’s are designed for 50 hours of maintenance-free 
operation. The current life of the gas generator in each APU is 
20 hours, however, because of degradation of the catalyst; thus, 
the gas generator life is 60 hours with two refurbishments of the 
catalyst bed. 

The contractors involved with the APU system are 
Sundstrand Corp., Rockford, IL (APU and APU controller); 
Consolidated Controls, El Segundo, CA (APU fuel isolation 
valve); Pressure Systems Inc., Los Angeles, CA (APU fuel tank); 
SSP Products, Inc., Burbank, CA (APU exhaust duct assembly); 
Sundstrand Data Control, Redmond, WA (APU heater 
thermostat); Cox and Co., New York, NY (APU fuel tank, fuel 
and lube line heaters); Brunswick Wintec, El Segundo, CA (APU 
fuel line filter); J.C. Carter Co., Costa Mesa, CA (APU servicing 
coupling); Wright Components Inc., Clifton Springs, NJ (fuel 
pump seal cavity drain catch, relief valve); Rocket Research 
Corp., Redmond, WA (APU gas generator). 
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WATER SPRAY BOILER 


The water spray boiler (WSB) maintains auxiliary power 
unit (APU) lube oil and hydraulic fluid temperatures below 
129°C (265°F) and 108°C (228°F) respectively during APU/ 
hydraulic system operation. Each of the three hydraulic/APU 
systems has its own WSB. The WSB uses a gaseous nitrogen 
(GN 2 ) system for positive expulsion of water into the boiler 
section for cooling and dumps the generated steam overboard. 
There are two redundant electronic controllers installed on each 
WSB. 


Each WSB consists of a boiler, expendable water supply, 
regulated gas pressurization system for water expulsion, separate 
water feed valves for independent control of water to cool the 
APU lube oil and hydraulic fluid, and APU lube oil cooling and 
hydraulic fluid bypass valves. Redundant electric controllers 
provide complete automatic operation. 




Water Spray Unit 



Water Spray Boilers in Aft Fuselage 


Water Spray Boiler System 
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Each WSB provides an expendable heat sink for the orbiter 
hydraulic system’s fluid and APU lube oil system on the ground, 
during the boost phase, orbital checkout, deorbit, and entry 
through landing and rollout. The core of each WSB is the 
stainless-steel, crimped-tube bundle oil cooler. The oil cooler of 
each WSB consists of a hydraulic fluid section and an APU lube 
oil section. The hydraulic fluid and APU lube oil flow through 
their respective sections of the tube bundle oil cooler. 

The GN2 pressure for each WSB is contained in its 
respective 152-millimeter (6-inch) spherical pressure vessel. The 
pressure vessel contains 0.34 kilograms (0.76 pounds) of GN 2 at 
a nominal pressure of 126,787 mmHg (millimeters of mercury) 
(245 psi) at 37°C (70°F). The GN 2 storage system of each WSB 
is directed to its respective water storage tank. Each storage 
vessel contains sufficient GN 2 to expel all the water from the 
tank and to allow for relief valve venting during ascent and 
leakage of one cubic centimeter per minute over a thirty-day 
period. 

The GN 2 shutoff valve between the GN 2 pressure vessel and 
H 2 O storage tank of each WSB permits isolation of high pressure 
GN 2 supply. Each GN 2 valve is controlled by its respective boiler 
N 2 supply 1, 2, or 3 switch on the flight deck crew display and 
control panel R2. The GN 2 shutoff valve is latched in the open 
or close position and consists of two independent solenoid coils 
which allow valve control from either the primary or secondary 
controller. The respective switch is positioned to control each 
valve. 

A single-stage regulator is installed between the GN 2 
pressure shutoff valve and the H 2 O storage tank. The GN 2 
regulator for each WSB regulates the high pressure GN 2 between 
1,267 and 1,345 mmHg (24.5 to 26 psi) to the H 2 O storage tank. 

A relief valve is incorporated internally to each GN 2 
regulator to prevent the H 2 O storage tank pressure from 
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exceeding 1,707 mmHg (33 psi) due to heat soak-back when 
operating or in the event of a failed open GN 2 regulator. The 
GN 2 relief valve opens between 1,552 and 1,707 mmHg (30 to 
33 psi). 

The H 2 O supply for each WSB is stored in a positive 
displacement aluminum water tank containing a welded metal 
bellows separating the stored water inside the bellows from the 
GN 2 expulsion gas. The 63 kilograms (140 pounds) of H 2 O in 
each WSB provide total heat rejection. 

Non-redundant pressure and temperature sensors located 
downstream of the GN 2 pressure vessel and on the H 2 O tank for 
each WSB transmit the pressures and temperatures via the 
A controller to the Systems Management General Purpose Com¬ 
puter (SM-GPC). The SM-GPC computes the pressure/volume/ 
temperature and transmits the H 2 O tank quantity to the flight 
deck crew display and control panel F8 for each WSB. The APU 
FUEL/H 2 O QTY switch on panel F8 is positioned to H 2 O which 
allows the H 2 O quantity of each WSB to be displayed on the 
APU FUEL/H 2 O QTY 1, 2, or 3 meter. Thus H 2 O quantity is 
only available when the A controller is powered. 

Downstream of the H 2 O storage tank, the feedwater lines to 
each water boiler split into two parallel lines: one line goes to the 
hydraulic fluid flow section, one to the APU lube oil section. A 
hydraulic fluid water feed valve is installed in the water line to 
the hydraulic fluid section and an APU lube oil water feed valve 
is installed in the water line to the APU lube oil section. Each 
valve is controlled independently by the WSB controller. 

The two WSB controllers are regulated by the respective 
BOILER CNTLR PWR/HTR switches 1, 2, and 3 on the flight 
deck crew display and control panel R2. When the applicable 
switch is positioned to A, the A controller 'for. that WSB is 
powered; or, if positioned to B, the B controller is powered. The 


343 








(A) 


Primary 

Controller 

— 

i 


i_ 



97°C (208°F) 

Set Point Temperature 
Turns On Hydraulic Fluid 
Water Feed Valve 


Set Point Temperature 
I Turns on APU Lube Oil 
Water Feed Valve 



Water Spray Boiler (One of Three) 


J 


j 


344 










































































































Space Shuttle Spacecraft Systems 



OFF position of the applicable switch removes electrical power 
from both controllers. 

The BOILER CNTLR switches 1, 2, and 3 enable (provide 
the automatic control functions) the specific controller A or B 
which was selected for that WSB by the BOILER CNTLR 
PWR/HTR switch on panel R2. When the applicable controller A 
or B is enabled for that WSB, a ready signal is transmitted to the 
corresponding APU/HYD READY TO START talkback indicator 
(along with other prerequisites from the APU and hydraulic 
system) on the flight deck crew display and control panel R2, if 
the following additional conditions are met: GN 2 shutoff valve is 
open, steam vent nozzle temperature is greater than 54°C 
(130°F), and the hydraulic fluid bypass valve is in the correct 
position. 

The enabled controller of that WSB monitors the hydraulic 
fluid and APU lube oil outlet temperature. The hydraulic fluid 
outlet temperature controls the hydraulic fluid water feed valve 
and the APU lube oil outlet temperature controls the APU lube 
oil water feed valve. Signals are generated based on a comparison 
of the hydraulic system fluid temperature to its 97°C (208°F) 
set point and of the APU lube oil to its 121°C (250°oF) set 
point. As the respective feed water valve opens, instantaneous 
flows of 6.8 kilograms per minute (15 pounds per minute) 
maximum through the hydraulic section and 4.5 kilograms (10 
pounds) per minute maximum through the APU lube oil section 
enter the water boiler through these respective spray bars to 
effect evaporative cooling of the hydraulic fluid and APU lube oil 
with the steam vented out through the overboard steam vent. 

The core of each WSB is the stainless steel crimped tube 
bundle. The hydraulic fluid section is divided into three 
431-millimeter (17-inch) long passes of crimped tubes (first 
pass—234 tubes, second pass—224 tubes, and third pass—214 
tubes). The tubes are 3.18 millimeters (0.125 inches) in diameter, 


> 
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with a wall thickness of 0.25 millimeters (0.010 inch). Crimps 
located every six millimeters (0.24 inches) break up the internal 
boundary layer and promote enhanced turbulent heat transfer. 
The APU lube oil section is comprised of two passes with 103 
crimped tubes in its first pass and 81 smooth tubes in the second 
pass. Although the second pass is primarily a low pressure drop 
return section, approximately 15 percent of the APU lube oil 
heat transfer occurs there. 

Three spray bars manifolded together feed the hydraulic 
fluid section while two spray bars feed the APU lube oil section 
of each WSB. 

The separate water feed valves modulate the water flow to 
each section of the tube bundle core of each WSB independently 
in 200-millisecond pulses that vary from one pulse every ten 
seconds to one pulse every 0.250 seconds. 

When the orbiter is in the vertical launch attitude on the 
launch pad with the APU/hydraulic pump combination and the 
WSB’s in operation, the APU tube bundle is completely 
immersed in water. This provides for cooling of the APU’s lube 
oil. Liquid level sensors in the spray boiler of each WSB prevent 
the hydraulic water feed valve from pulsing when that water 
boiler is full to avoid water spillage or loss. 

It is noted that during prelaunch, the APU’s lube oil cooling 
is required within six to seven minutes after APU start. The 
hydraulic systems fluid probably will not require cooling during 
ascent. 

Due to the unique hydraulic system fluid flows, control 
valves are located in the hydraulic system fluid line section of 
each WSB. Normally, hydraulic system fluid flows up to 79 liters 
per minute (21 gallons per minute); however, the hydraulic 
system experiences one- to two-second flow spikes up to 
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238 liters per minute (63 gallons per minute). If these spikes 
were to pass through the boiler, pressure drop would increase 
nine-fold and the boiler would flow-limit the hydraulic system. 
To prevent this, a relief function is provided by a spring-loaded 
poppet valve which opens when the hydraulic fluid pressure drop 
exceeds 2,484 mmHg (48 psi) and is capable of flowing 162 liters 
per minute (43 gallons per minute) at a differential pressure of 
2,587 mmHg (50 psi) across the boiler. A temperature-controlled 
diverter valve allows the hydraulic fluid to bypass the boiler 
when the hydraulic fluid has decreased to 87°C (190°F). At 
98°C (210°F), the controller commands the diverter valve to 
direct the fluid through the boiler. When the hydraulic fluid 
cools to 870C (190OF), the controller again commands the 
diverter valve to bypass the fluid around the boiler. 

Two hours before APU/hydraulic checkout in orbit, and 
before deorbit, the controllers for each WSB are enabled to allow 
the steam vent heater to preheat the steam vent nozzle and WSB 
surface heaters for the water boiler surfaces. When the APU/ 



hydraulic combination is started and the hydraulic fluid and APU 
lube oil flow commences and the fluid temperatures rise, 
spraying is initiated as required. 

During entry into the atmosphere, whenever the boiling 
point of water is greater than 87°C (190°F), the liquid level 
sensor is enabled and the boiler operates in a flooded mode. 

There are three 863 x 787 x482 millimeter (34x31 x 19 inch) 
WSB’s located in the aft fuselage of the orbiter, one for each 
independent hydraulic system/APU combination. The dry weight 
of each WSB is 82 kilograms (181 pounds). The WSB’s require 
electrical power and control from the orbiter as its only outside 
source. 

The WSB’s are mounted in the orbiter aft fuselage between 
X 0 1340 and 1400 and on the Z Q plane 488 and minus 15, plus 
15 in the Y 0 plane. Insulation blankets cover each WSB. 

The contractor for the WSB’s is Hamilton Standard 
Division, United Technologies Inc., Windsor Locks, CT. 



) 


346 







Space Shuttle Spacecraft Systems 









_ 


— 






HYDRAULIC SYSTEM 


The hydraulic system consists of three independent 
hydraulic systems. Each of the three auxiliary power units 
provides mechanical shaft power to drive a hydraulic pump, and 
each of the three hydraulic pumps provides the hydraulic 
pressure for the respective hydraulic system. 
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Each hydraulic system provides hydraulic pressure for 
operation of actuators to control orbiter aerosurfaces (elevons, 
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Hydraulic Systems 

The hydraulic systems are capable of operation when 
exposed to forces or conditions caused by acceleration, decelera¬ 
tion, normal “g”, zero “g”, hard vacuum, and extreme low 
temperatures encountered in orbit. The systems are active during 
liftoff, ascent, and orbital insertion for main engine thrust vector 
control and propellant valve control, in addition to elevon load 
relief during ascent. 


In orbit, the hydraulic system’s fluids are circulated 
periodically by electric-motor-driven circulation pumps to absorb 
heat from the Freon-21 hydraulic heat exchanger and distribute 
it to all areas of the hydraulic systems. 


The hydraulic system is restarted for deorbit, entry, and 
descent for actuation of the aerodynamic control surfaces 


(elevons, rudder/speedbrake, and body flap) during atmospheric 
flight, for deploying the main and nose landing gear, for 
actuation of the main landing gear brakes and anti-skid system, 
and for actuation of nose landing gear steering. 

The hydraulic systems are designated 1, 2, and 3. Each 
consists of the components necessary to generate, distribute, 
control, monitor, and utilize hydraulic pressure and thermally 
condition the hydraulic fluid. 

The hydraulic pump for each hydraulic system is a variable 
displacement-type pump. Each hydraulic pump has an 
electrically operated depressurization valve. The depressurization 
valve for each hydraulic pump is controlled by its respective 
HYD MAIN PUMP PRESS switches 1, 2, or 3 located on the 
flight deck display and control panel R2. When the applicable 
HYD MAIN PUMP PRESS switch is positioned to LOW, the 
respective depressurization valve is energized, which reduces the 
hydraulic pump discharge pressure from its normal 150,075 to 
160,425 millimeters of mercury (mmHg) (2,900 to 3,100 psi) 
output to 25,875 to 51,570 mmHg (500 to 1,000 psi), thereby 
reducing the auxiliary power unit (APU) torque requirements 



Hydraulic System Pumps 
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during the start of the auxiliary power unit. (When display and 
control panel nomenclature is printed in all caps—e.g., HYD 
MAIN PUMP PRESS—it indicates that it is the exact way it 
appears on the panel.) 

Prior to the start of the APU, the applicable hydraulic 
system APU/HYD READY TO START talkback indicator on the 
flight deck display and control panel R2 should be gray. In order 
for the applicable talkback indicator to indicate gray, the 
respective hydraulic system HYD MAIN PUMP PRESS switch 
must be in LOW, the respective BOILER CNTLR/PWR/HTR, 
BOILER CNTLR, and BOILER H 2 SUPPLY switches must be in 
ON position on panel R2 and the boiler ready signal must be 
present which consists of four parameters: boiler stream above 
54°C (I30°F), N 2 (nitrogen) valve open, bypass valve powered, 
and boiler enabled. 

When the applicable auxiliary power unit has been started, 
the respective HYD MAIN PUMP PRESS switch is positioned 
from LOW to NORM. This de-energizes the respective 
depressurization valve, allowing that hydraulic pump to increase 
its outlet pressure from 25,875 to 51,750 mmHg (500 to 
1,000 psi) to 150,075 to 160,425 mmHg (2,900 to 3,100 psi). 
Each hydraulic pump is a variable displacement pump which 
provides 0 to 238 liters (0 to 63 gallons) per minute at 
150,250 mmHg (3,000 psi) nominal, with the APU at normal 
speed; and 263 liters (69.9 gallons) per minute at 155,250 mmHg 
(3,000 psi) nominal, with the APU at high speed. 

Each hydraulic system has a filter module assembly which 
filters the hydraulic fluid entering and leaving the hydraulic 
pump in addition to a filter in the hydraulic pump case drain and 
a filter in the return line to the reservoir. 

A high-pressure relief valve contained within the filter 
module for each hydraulic system relieves the hydraulic pump 


supply line pressure into the return line in the event the supply 
line pressure exceeds 199,237 mmHg (3,850 psi) differential. 

A pressure sensor in the filter module for each hydraulic 
system monitors the hydraulic system source pressure and 
displays the pressure on the flight deck display and control 
HYDRAULIC PRESSURE 1, 2, and 3 meters on panel F8. The 
same hydraulic pressure sensor for each system also provides an 
input to the YELLOW HYD PRESS caution and warning light on 
the flight deck display and control panel F7, if the hydraulic 
pressure of systems 1, 2, or 3 is below 142,830 mmHg 
(2,760 psi). The RED BACKUP caution and warning light on 
panel 7 will illuminate if the hydraulic pressure of systems 1, 2, 
or 3 is at 142,830 mmHg (2,760 psi). 

The aerosurfaces (elevons, rudder/speedbrake and body 
flap) are powered by hydraulic pressure and the movement of the 
applicable aerosurface is accomplished mechanically. Each of the 
aerosurface actuation units have switching valves which interface 
with all three hydraulic systems with the exception of the body 
flap. One of the hydraulic systems is the normal supply system 
and the other two are standby systems No. 1 and No. 2 in the 
case of the elevon actuators. All three systems are utilized for the 
body flap and rudder/speecbrake actuation units, thus a loss of a 
hydraulic system results in a reduced response rate of actuation 
for the body flap. The aerosurfaces are controlled by the 
guidance, navigation, and control (GN&C) system in respect to 
command functions. 

The orbiter nose and main landing gear deployment is 
accomplished by hydraulic pressure. Hydraulic system No. 1 
pressure is the only system utilzed to hydraulically actuate the 
landing gear uplock hooks for release of each landing gear. A 
pyrotechnic initiator provides the emergency backup of the 
No. 1 hydraulic system. The pyrotechnic initiator on each 
landing gear mechanically actuates the landing gear uplock hooks 
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Hydraulic Power System Main Pump Mode 
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Hydraulic Actuator System - Landing Gear and Brake 
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Hydraulic Actuator System - Landing Gear and Brake 
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for release of each landing gear. Nose gear steering is 
accomplished with hydraulic system pressure from the No. 1 
hydraulic system only. The left and right main landing brakes 
provide a backup for nose gear steering. This is accomplished by 
alternately applying the left and right main landing gear brakes 
which will castor the nose wheel for steering. 

The orbiter main landing gear brakes utilize No. 1 and No. 2 
hydraulic systems as the primary source of hydraulic pressure, 
and No. 3 hydraulic system as the standby hydraulic pressure 
source. 

A landing gear isolation valve is installed in the hydraulic 
supply line to each of the landing gear hydraulic systems. The 
No. 1 hydraulic system landing gear isolation valve, when 
opened, allows hydraulic pressure to the nose and main landing 
gear systems, the nose gear steering system, and the main landing 
gear brakes; and, when closed, isolates the No. 1 hydraulic 
system source pressure from these areas. The No. 2 or No. 3 
hydraulic system landing gear isolation valves, when opened, 
allow access, respectively, to the main landing gear brakes, and, 
when closed, isolates access to the main landing gear brakes. 

Each of the landing gear isolation valves is controlled by its 
respective HYDRAULICS LG HYD ISOL VLV switch on the 
flight deck display and control panel R4. The CLOSED position 
of the applicable switch closes that isolation valve, isolating the 
respective hydraulic source pressure from that landing gear 
system. A talkback indicator located above the respective switch 
on panel R4 would indicate CL (closed). The landing gear 
isolation valves are closed during prelaunch, boost, and entry. 
The OPEN position of the respective switch opens the respective 
isolation valve, allowing that hydraulic system source pressure to 
its landing gear system. The respective talkback indicator would 
indicate OP (open). The landing gear isolation valves are opened 
on-orbit to permit thermal conditioning of the landing gear 


hydraulic fluid and system. The GPC (general purpose computer) 
position permits the GPC to open landing gear isolation valve 
system 3 for 15 minutes, system 2 for 10 minutes, and system 1 
for 5 minutes prior to landing to permit thermal conditioning 
of the landing gear hydraulic fluid and system. 

Hydraulic system No. 1 landing gear retract/circulation 
valve is controlled by the HYDRAULICS LG RET/CIRC VLV 
switch on the flight deck display and control panel R4. The 
retract/circulation valve is closed normally during prelaunch, 
boost, and entry. When the LG RET/CIRC VLV is position 
to OPEN, the No. 1 hydraulic system landing gear 
retract/circulation valve is energized open which permits system 
source pressure to circulate through the retract lines through the 
nose and main landing gear uplock actuators and return through 
the extend lines (the pressure inlet port of the landing gear 
control valve is closed, however, this outlet port of the landing 
gear control valve is open to the return line) which permits the 
thermal conditioning of the landing gear hydraulic fluid and 
system. The CLOSE position closes the retract/circulation valve 
which prevents the thermal conditioning landing gear hydraulic 
fluid and system. The GPC position permits the GPC to open the 
retract/circulation valve on-orbit to permit thermal conditioning 
of landing gear hydraulic fluid and system. The 
retract/circulation valve will be closed in the GPC mode prior to 
entry. 

The three Space Shuttle main engines (SSME) and their 
associated controllers provide the control of the individual 
hydraulic actuators which positions each SSME preburner 
oxidizer valve, main oxidizer valve, chamber coolant valve, fuel 
preburner oxidizer valve, and the main fuel valve. These valves 
are commanded open for SSME ignition and are sustained in the 
open position through ascent. These valVes* are commanded 
closed hydraulically at MECO (main engine cutoff). After 
SSME shutdown and ET (external tank) separation, these valves 
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are sequenced open for SSME propellant dump and purge, then 
sequenced closed for the remainder of the mission. Hydraulic 
source pressure No. 1 supplies SSME 1; hydraulic source 
pressure No. 2 supplies SSME 2; and hydraulic source pressure 
No. 3 supplies SSME 3. The SSME pneumatic system provides a 
backup closure of these valves in the event of a loss of hydraulic 
source pressure. 

After ET separation and SSME propellant dump and purge, 
the orbiter liquid oxygen and liquid hydrogen umbilical at the 
ET/orbiter interface are retracted and locked by three hydraulic 
actuators at each umbilical. Hydraulic system No. 1 source 
pressure is supplied to one actuator at each umbilical; hydraulic 
system No. 2 source pressure is supplied to a second actuator 
at each umbilical; and hydraulic system No. 3 source pressure 
is supplied to a third actuator at each umbilical. 

Each SSME is provided with thrust vector control by a pitch 
and yaw actuator which is controlled by the ascent thrust vector 
control system. Each actuator is powered hydraulically which 
mechanically gimbals the SSME for start and launch position and 
for thrust vector control during the ascent. Each actuator has a 
switching valve which allows a primary hydraulic source pressure 
to power the actuator. A standby hydraulic system is available 
in the event of failure of the primary. The center SSME pitch 
actuator primary hydraulic source pressure is hydraulic system 
No. 1 and the standby hydraulic supply is No. 1. The center 
SSME yaw actuator primary hydraulic source pressure is 
hydraulic system No. 3 and the standby hydraulic supply is 
No. 1. The left SSME pitch actuator primary hydraulic source 
pressure is No. 2 and the standby is No. 1. The left SSME yaw 
actuator primary hydraulic supply source pressure is No. 1 and 
the standby is No. 2. The right SSME pitch actuator primary 
hydraulic supply source pressure is No. 3 and the standby is 
No. 2. The right SSME yaw actuator primary hydraulic supply 
source pressure is No. 2 and the standby is No. 3. After MECO, 





the actuators will position the SSME’s to the dump position for 
SSME propellant dump to minimize attitude disturbance. After 
propellant dump the actuators will position the SSME’s to the 
stowed position for minimum aerodynamic interference for 
entry. 

The hydraulic source pressure of each hydraulic system is 
supplied or isolated to the SSME engine hydraulic actuators and 
the SSME thrust vector control pitch and yaw actuators by the 
MPS (main propulsion system)/TVC (thrust vector control) 
ISOL (isolation) VLV 1, 2, and 3 switches on the flight deck 
display and control panel R4. When the applicable MPS/TVC 
ISOL VLV switch is positioned to OPEN, the corresponding 
hydraulic source pressure is supplied to the aforementioned 
areas; and when positioned to CLOSE, that hydraulic system is 
isolated. A talkback indicator located above the respective 
switch indicates OP when that valve is open or indicates CL when 
that valve is closed. The MPS/TVC ISOL VLV 1, 2, and 3 are 
open during prelaunch and ascent and are closed after main 
propulsion dump, and remain closed except to reposition the 
SSME’s prior to deorbit, if required. 

The return line of each hydraulic system is directed to 
its respective WSB. There is one WSB for each hydraulic system. 
The WSB provides the expendable heat sink for each orbiter 
hydraulic system and each of the APU lube oil systems during 
prelaunch, boost phase, on-orbit checkout, de-orbit, and entry 
through rollout and landing. 

Due to the unique hydraulic system fluid flows, hydraulic 
fluid control valves are located in the return line of the hydraulic 
system to the WSB. Normally, the hydraulic system fluid flows 
up to 79 liters per minute (21 gallons per minute), however, the 
hydraulic system experiences one- to two-second flow spikes up 
to 238 liters per minute (63 gallons per minute). If these spikes 
were to pass through the WSB, pressure drop would increase 
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nine-fold and the WSB would flow-limit the hydraulic system. To 
prevent this, a relief function is provided by a spring-loaded 
poppet valve which opens when the hydraulic fluid pressure 
exceeds 2,484 mmHg (48 psi) and is capable of flowing 162 
liters per minute (43 gallons per minute) at 2,587 mmHg (50 psi) 
differential across the WSB. A temperature controller diverter 
valve allows the hydraulic fluid to bypass the boiler when the 
hydraulic fluid has increased to 98°C (210OF). At 98<>C 
(210°F), the controller commands the diverter valve to direct 
the hydraulic fluid through the WSB. When the hydraulic fluid 
cools to 870C (190°F), the controller again commands the 
diverter valve to bypass the fluid around the WSB. 

A reservoir in each hydraulic system return line provides 
positive pressure fluid to the main hydraulic pump and the 
circulation pump in that hydraulic system. Within each hydraulic 
reservoir, there is a differential area piston (40 to 1 area ratio 
between the reservoir side and accumulator side) which is 
actuated by that hydraulic system pressure and provides the 
pressurized fluid to the main hydraulic pump and circulation 
pump of that system. The reservoir of each hydraulic system also 
provides for volumetric expansion and contraction. The capacity 
of the MIL-H-83282 hydraulic fluid (synthetic hydrocarbon, 
reduces fire hazard) in each reservoir is 30,321 cubic centimeters 
(1,850 cubic inches). The quantity of each reservoir is monitored 
on the flight deck display and control panel F8 
as HYDRAULIC QUANTITY 1, 2, and 3 in percentages. 
The quantity in each reservoir is 30 liters (8 gallons). A pressure 
relief valve in each reservoir protects that reservoir from 
overpressurization and relieves at 6,210 mmHg (120 psi) 
differential. 

A hydraulic accumulator in each hydraulic system dampens 
pressure impulses and minimizes the main hydraulic pump and 
circulation pump pressure ripples. Each accumulator is a piston 
type and precharged with gaseous nitrogen (GN 2 ) at 87,975 to 


90,562 mmHg (1,650 to 1,750 psi). The GN 2 capacity of each 
accumulator is 243 cubic centimeters (96 cubic inches). 
The hydraulic fluid volume is 129 cubic centimeters 
(51 cubic inches). 

A circulation pump in each hydraulic system is utilized 
to provide the thermal conditioning of the hydraulic fluid in 
that system. The circulation pump in each hydraulic system 
is electrically driven. 

A pressure sensing priority valve in each hydraulic system 
automatically closes and traps the accumulated hydraulic 
pressure permitting the reservoir to supply a positive hydraulic 
pressure from the reservoir to the main hydraulic pump and 
circulation pump in altitude start conditions. A dump valve 
is provided for each accumulator and is utilized to depressurize 
the respective hydraulic reservoir for ground operations only. 

Each circulation pump is controlled by its respective HYD 
CIRC PUMP POWER switches 1, 2, and 3 on the flight deck 
display and control panel A12. The HYD CIRC PUMP POWER 
switches 1, 2, and 3 on panel A12 provide MNA, if in MNA; 
or MNB, if in MNB, to the respective APU/HYD CIRC 
PUMPS 1, 2, and 3 switches on panel R2. 

The ON position of the HYD CIRC PUMP 1, 2, and 3 
switches on panel R2 provide electrical power to its respective 
hydraulic system circulation pump providing that the APU 
START/RUN switch is not in the START/RUN or 
START/ORIDE position. It is noted that all three circulation 
pumps operate in prelaunch, prior to APU start and at 
postlanding. The GPC position of the HYD CIRC PUMP 1, 2, 
and 3 switches provide GPC automatic control of the respective 
circulation pump providing the APU/START/RUN switch is not 
in START/RUN or START/ORIDE position. In the GPC 
automatic mode, there are two modes: one is 
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Hydraulic Power System Circulation Mode 



J 


356 
























































































































































Space Shuttle Spacecraft Systems 



thermostat-controlled and the other is timer-controlled. In the 
thermostat-controlled mode, the first hydraulic system 
temperature sensor to reach below minus 17°C (0°F) is the first 
system to be circulated. The GPC commands that circulation 
pump off when all temperature sensors in that hydraulic system 
being circulated is minus 6°C (20°F) or when that circulation 
pump has been on for a good period in excess of a specified 
minimum run time and a second hydraulic system requires 
circulation. The GPC timer control consists of one temperature 
sensor in each hydraulic system which has excessively low and 
high temperature limits, which demand continuous circulation of 
that hydraulic system and the circulation pump run time for each 
pump is set to a desired value along with the delay time between 
pump runs and will continue to operate and cycle the three 
circulation pumps until the temperature high and low limits are 
readjusted to normal set points. The OFF position removes 
electrical power from the circulation pump. At postlanding, the 
APU/hydraulic system is shutdown. The circulation pumps are 
activated to circulate the heated hydraulic fluid through the WSB 
for cooling. 

The circulation pump in each hydraulic system consists of 
a high-pressure and low-pressure, two-stage gear pump driven by 
a 28-Vdc induction electric motor with a self-contained inverter. 
Protection against excessive electronic component temperature 
is provided by directing the inlet fluid flow around these 
components and through the electric motor before entering the 
pumps. The low-pressure stage is rated at 10.9 liters per minute 
(2.9 gpm) at 181,125 mmHg (350 psi). The circulation pumps in 
each hydraulic system maintains the desired hydraulic fluid 
temperatures in prelaunch prior to APU start and provides orbital 
thermal control of the hydraulic fluid by transferring heat from 
the active thermal control system Freon-21 coolant loop/ 
hydraulic heat exchanger to that hydraulic system. After 
postlanding/rollout, the circulation pump in each hydraulic 
system provides thermal conditioning of the hydraulic fluid after 


APU shutdown through the WSB to limit hydraulic fluid 
temperature rise due to heat soakback. In the event of pressure 
loss in the accumulator due to leakage on-orbit, the high-pressure 
stage pump delivers 0.3 liters per minute (0.1 gpm) at a discharge 
pressure up to 129,375 mmHg (2,500 psi) to repressurize the 
accumulator. This function is regulated by a pressure-activated 
control valve. 

Insulation and electrical heaters are used on those portions 
of the hydraulic systems which are not adequately thermal 
conditioned by the individual hydraulic system circulation pump 
due to stagnant hydraulic fluid areas. 

Redundant electrical heaters are installed on the body flap 
differential gearbox, rudder/speed brake mixer gearbox, the four 
elevon actuators, the aft fuselage body flap A and B seal cavity 
drain line, and rudder/speed brake cavity drain line. 

The heaters are enabled by the HYDRAULIC HEATER 
switches on the flight deck display and control panel A12. 
There are HYDRAULIC HEATER switches A and B for the 
RUDDER/SPD BK, BODY FLAP, ELEVON, and AFT 
FUSELAGE. The AUTO A and B position of each of these 
switches permits the corresponding electrical Bus A or B to 
power the redundant heaters at each location. The thermostats in 
each electrical heater system cycle the heaters on/off automati¬ 
cally. The OFF position of the applicable switch removes 
electrical power from that heater system. 

The contractors involved with the hydraulic systems are 
Arkwin Industries, Westbury, NY (hydraulic reservoir, filter, and 
control valves); Purolator Inc., Newbury Park, CA (hydraulic 
filter module); Parker-Hannifin Corp., Irvine, CA (hydraulic 
accumulator); Abex Corp., Aerospace Division, Oxnard, CA 
(hydraulic pump); Crissair Inc., El Segundo, CA (hydraulic check 
valve and flow restrictor); Hi-Temp Insulation Inc., Camarillo, 
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CA (hydraulic blanket insulation); Bertea Corp., Irvine, CA 
(external tank umbilical retractor actuator, main and nose 
landing gear uplock actuator); Lear Siegler, Elyria, OH (hydraulic 
disconnect); Moog Inc., East Aurora, NY (main engine gimbal 
servo actuators and elevon servo actuators); Pneu Devices, 
Goleta, CA (hydraulic thermal control shutoff valve and electric- 
motor-driven circulation pump); Pneu Draulics, Montclair, CA 
(priority valve hydraulic reservoir); Resistoflex, Roseland, NJ 
(hydraulic system line connectors); Sterer Engineering and 
Manufacturing, Los Angeles, CA, (hydraulic solenoid shutoff 
valve, main engines and landing gear, nose landing gear steering 


and damping system, 3-way solenoid operating valve landing gear 
uplock and control valves); Sundstrand, Rockford, IL (rudder/ 
speedbrake actuation unit and body flap actuation unit); 
Symetrics, Canoga Park, CA (hydraulic quick disconnects); 
Titeflex Division, Springfield, MA (hydraulic system hose); 
Whittaker Corp., North Hollywood, CA (hydraulic accumulator 
dump valve); Wright Components, Inc., Clifton Springs, NJ 
(hydraulic latching solenoid valve); Hamilton Standard Division 
of United Technologies Corp., Windsor Locks, CT (water boiler 
hydraulic thermal unit and ground support equipment hydraulic 
cart). 






Space Shuttle Spacecraft Systems 



) 



LANDING GEAR SYSTEM 


The landing gear system is a conventional aircraft tricycle 
configuration with steerable nose gear and main left and right 
landing gears. 

The landing gear system includes a shock strut assembly 
constructed of high-strength, stress-corrosion-resistant steel 
alloys, aluminum alloys, stainless steel, and aluminum bronze. 
Each gear is made up of two wheel and tire assemblies. The nose 
landing gear is steerable, and each of the two main landing gears 
has a brake assembly with antiskid protection. 

The shock strut assembly of each gear is a pneudraulic 
shock absorber containing gaseous nitrogen and hydraulic fluid. 
Because the orbiter will be under zero-g conditions during space 
flight, a' floating diaphragm separates the gaseous nitrogen from 
the hydraulic fluid to maintain absorption integrity. 

Cadmium-titanium plating and urethane paint are applied to 
landing gear strut surfaces for space flight protection. The wheel 
halves are forged aluminum, primed, and painted with two coats 
of urethane paint. 

The landing gears, during the spacecraft’s approach, are 
extended by the orbiter’s commander or pilot, who first 
depresses a landing gear system “Arm” pushbutton and then a 
“DN” pushbutton. The gear is fully extended within ten seconds. 

Initiation of the system hydraulically releases uplock hooks, 
which permit the landing gear to free-fall into the extended 
position. Springs and hydraulic actuators assist the free fall. 

Pyrotechnic actuators may also unlock the uplock hooks if 
the hydraulic system malfunctions. When fully extended, the 
gear is locked by spring-loaded bungees. 


Doors on the nose and the main right and left gears are 
operated through mechanical linkage attached to the door and 
fuselage and powered by strut camming action during gear 
extension. As the uplock hook is released and the gear begins its 
descent, the doors open in sequence. The gear strut actuators 
include an oil snubber to control the rate of extension and 
prevent damage to the downlink linkages. 

The landing gears may not be retracted in flight. Retraction 
is a ground operation. For retraction, each gear is hydraulically 
moved forward and up. The mechanical linkage closes the doors, 
and the uplock hook is engaged to retain the gears in the housing. 
The nose gear is housed in the forward fuselage, and two doors 
cover the area. The right and left main gears are retracted into 
the wings and have one large door covering the area. 
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Each landing gear door has high-temperature, reusable 
surface insulation (HRSI) tiles bonded to the outer surface and a 
thermal barrier to protect the landing gear from the high- 
temperature thermal loads encountered during entry. 
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Main Landing Gear Deployed 


The gears are deployed only after the spacecraft has an 
indicated airspeed of less than 300 knots (345 mph). 

The nose and main landing gear are deployed with hydraulic 
pressure. Hydraulic system No. 1 is the only system used to 
actuate the uplock hooks for release of each landing gear. 
Pyrotechnic initiators serve as backup to the hydraulic system. 
Hydraulic system No. 1 also is the only system used to position 
the nose gear for steering. During rollout, the orbiter also may be 
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steered by differential main gear brake application, which casters 
the nose wheel for steering. 
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The orbiter main landing gear brakes use hydraulic systems 
No. 1 and 2 as the primary sources and No. 3 as a standby 
source. 

An isolation valve is installed in the hydraulic supply source 
line to each landing gear hydraulic system. When the system 
No. 1 isolation valve is opened, pressure is applied to the nose 
and main landing gear deployment system, the nose gear steering 
system, and the main landing gear brakes. The hydraulic system 
No. 2 or 3 landing gear isolation valves, when opened, allow 
pressure to be applied to the main landing gear brakes. 

The landing gear isolation valves are controlled by 
HYDRAULICS LG HYD ISOL VLV switches on flight deck 
display and control Panel R4. (When display and control panel 
nomenclature is printed in all caps—e.g., HYDRAULICS LG 
HYD ISOL VLV—it indicates that it is the exact way it appears 
on the panel.) When these switches are closed, the hydraulic 
sources are isolated from that landing gear system; when open, 
they are connected to the systems. An indicator located above 
each switch shows whether the valve is closed (CL) or open (OP). 
The isolation valves normally are closed during prelaunch, boost, 
and entry. The hydraulic system No. 1 isolation valve is opened 
on orbit to permit thermal conditioning of the landing gear 
deployment hydraulic systems; it is closed before entry. The GPC 
(general purpose computer) position of the isolation valve 
switches enables the computer to open the landing gear isolation 
valves 15, 10, and 5 minutes, for system No. 3, 2, and 1, 
respectively, before landing for thermal conditioning of the 
landing gear hydraulic brake systems. 

The HYDRAULICS LG RET/CIRC VLV switch on 
Panel R4 controls the landing gear retract/circulation valve in 
hydraulic system No. 1. The retract/circulation valve normally is 
closed during prelaunch, boost, and entry. When it is open, 
hydraulic system No. 1 source pressure circulates through the 
retract lines to the nose and main landing gear uplock actuators 




for thermal conditioning of the system No. 1 landing gear 
hydraulic fluid. The pressure enters through an orifice in the 
piston head and returns through the extend lines (the pressure 
inlet port of the landing gear control valve is closed; however, the 
outlet port of the landing gear control valve is open to the system 
No. 1 return line). The hydraulic fluid flow to the landing gear 
strut actuators dead ends at the actuators’ retract ports. The GPC 
position of the switch permits the computer to automatically 
(temperature controlled) open and close the retract/circulation 
valve to allow on-orbit thermal conditioning of the landing gear 
hydraulic system number one fluid. The retract/circulation valve 
is closed in the GPC mode when the landing gear system is 
ARMED for deployment. Deployment controls for the nose and 
main landing gear are located on the flight deck display and 
control panel. The commander (CDR) and pilot (PLT) each has 
landing gear indicators and control stations. The commander’s 
indicator and controls are on panel F6; and pilot’s indicators and 
controls are on panel F8. At each station is a NOSE, LEFT, and 
RIGHT landing gear indicator and an ARM and DN (down) 
pushbutton switch/light indicator with guard covers. 

The landing gear position indicators indicate UP when the 
gear is up and locked, BARBER POLE when the gear is 
deploying or retracting, and DN when the gear is down and 
locked. 

Landing gear deployment is initiated when the CDR or PLT 
depresses the guarded ARM pushbutton switch/light indicator, 
then the guarded DN pushbutton switch/light indicator. This is 
accomplished at least 15 seconds prior to predicted touchdown 
and at a speed no greater than 300 knots (345 mph). 

Depressing the ARM pushbutton switch/light indicator 
energizes latching relays that close the hydraulic system No. 1 
landing gear retract/circulation valve and the normally open 
redundant shutoff valve to the retract/circulation valve. It also 
arms the nose and main landing gear pyrotechnic initiator 
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controller’s (PIC’s) and illuminates the yellow light in the ARM 
pushbutton switch/light indicator. 


The DN pushbutton switch/light indicator is then depressed. 
This energizes latching relays that open the hydraulic system 
No. 1 landing gear control valve, permitting the fluid in hydraulic 
system No. 1 to flow through the inlet port to the outlet port to 
the landing gear extend hydraulic lines. It also opens the landing 
gear dump valve, allowing the landing gear retract line fluid to 
flow into the hydraulic system No. 1 return line and illuminating 
the green light in the DN pushbutton switch/light indicator. 


Hydraulic system No. 1 source pressure is routed to the 
nose and main landing gear uplock actuators, which releases the 
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Uplock Release and Pyro Actuator Circuit 
(Simplified) 

nose and main landing gear uplock hooks and door uplock hooks. 
As the uplock hooks are released, the gear begins its descent, and 
mechanical linkage attached to the doors and fuselage is powered 
by landing gear strut camming action during the gear extension, 
which opens the landing gear doors. There are two landing gear 
doors for the nose gear and one door for each main landing gear. 
The landing gear free-falls into the extended position, and the 
strut actuators aid in the deployment. The hydraulic strut 
actuator incorporates a hydraulic fluid flow-through orifice 
(snubber) to control the rate of landing gear extension and 
thereby prevent damage to the gear’s down-lock linkages. 


If hydraulic system No. 1 fails to release the landing gear—in 
one second after the DN pushbutton is depressed—the nose, left, 
and right main landing gear uplock sensors (proximity switches) 
will provide inputs to the PIC’s for initiation of the redundant 
NASA Standard Initiators (NSI’s) (nose, left, and right main 
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landing gear pyrotechnic backup release system). They release 
the same uplock hooks as the hydraulic system. The nose landing 
gear, in addition, has a PIC and redundant NSI’s that initiate a 
pyrotechnic power assist thruster strut extender two seconds 
after the DN pushbutton is depressed. 

The landing gear drag brace overcenter lock and 
spring-loaded bungee lock the nose and main landing gear in the 
down position. 

The uplock and downlock sensors (proximity switches) on 
each landing gear control the respective LANDING GEAR 
NOSE, LEFT, and RIGHT indicators. 

The LDG GR/ARM/RN RESET switch positioned to 
RESET on the flight deck display and control panel A12 
unlatches the relays that were latched during landing gear 
deployment by the LANDING GEAR ARM and DN pushbutton 
light/switch indicators. This is primarily a ground function, 
which will be performed only during landing gear deactivation. 

The RESET position also will extinguish the yellow light in 
the ARM pushbutton switch/light indicator and the green light in 
the DN pushbutton switch/light indicator. In addition, the 
hydraulic system No. 1 landing gear dump valve is closed, the 
retract/circulation valve is opened only if the switch is in the 
OPEN position, and its redundant shutoff valve opened 
(deenergized) deenergizes the landing gear PIC circuits, and the 
landing gear control valve closes off the source pressure to the 
landing gear. 

The nose landing gear tires are 32 by 8.8 inches and will 
withstand a burst pressure of not less than 3.2 times the normal 
inflation pressure of 15,515 mmHg (300 psi). The maximum 
allowable load per nose landing gear tire is 20,412 kilograms 
(45,000 pounds) and rated at 225 knots (258 mph) landing 
speed. 



The nose landing gear shock strut has a 558-millimeter 
(22-inch) stroke. The maximum allowable derotation rate is 
approximately 9.4 degrees per second or 3.3 meters per second 
(11 feet per second), vertical sink rate. 

The main landing gear tires are 44.5 by 16.21 inches. The 
normal inflation pressure is 16,301 mmHg (315 psi). The 
maximum allowable load per main landing gear tire is 55,792 
kilograms (123,000 pounds). (If the orbiter touches down with a 
60/40 percent load distribution) on a strut’s two tires, with one 
tire supporting the maximum load of 55,792 kilograms (123,000 
pounds), then the other tire can support a load of only 37,381 
kilograms (82,410 pounds). Therefore, the maximum tire load 
on a strut is 93,173 kilograms (205,410 pounds) with a 60/40- 
percent tire load distribution. The STS-2 tires and operational 
tires are rated at 225 knots (258 mph). 

The main landing gear shock strut stroke is 406 millimeters 
(16 inches). The allowable main gear sink rate for a 
85,276-kilogram (188,000-pound) orbiter is 2.9 meters per 
second (9.6 feet per second) and 1.8 meters per second (6 feet 
per second) with a 102,513-kilogram (226,000-pound) orbiter. 
With a 20-knot (23-mps) crosswind, the maximum allowable gear 
sink rate for a 85,276-kilogram (188,000-pound) orbiter is 
1.8 meters per second (6 feet per second) and approximately 
1.5 meters per second (5 feet per second) with a 
102,513-kilogram (226,000-pound) orbiter. 

The landing gear tires have a life of five nominal landings. 

MAIN LANDING GEAR BRAKES 

Each of the orbiter’s four main landing gear wheels has 
electro-hydraulic disc brakes and an anti-skid system. 

Each main landing gear wheel has a disc brake assembly 
consisting of nine discs, four rotors, and five stators. The 
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Wheel Brake Subsystem 

carbon-lined beryllium rotors are splined to the inside of the 
wheel and rotate with the wheel. The carbon-lined beryllium 
stators are splined to the outside of the axle assembly and do 
not rotate with the wheel. When the brakes are applied, eight 
hydraulic actuators in the brake assembly press the discs 
together, providing brake torque. Four of these actuators are 
manifolded together from hydraulic system No. 1 in a brake 
chamber. The remaining four actuators are manifolded together 
from hydraulic system No. 2. The standby hydraulic system is 
hydraulic system No. 3. 

As in the landing gear deployment, the landing gear 
isolation valve in hydraulic system Nos. 1, 2, and 3 must be open 
to allow the applicable hydraulic source pressure to the main 
landing gear brakes. 

The BRAKES MNA, MNB, and MNC switches are located 
on the flight deck display and control panel 014, 015, and 016 
and allow electrical power to the brake/anti-skid control boxes A 



> 


Stator Back Plate 



and B. The ANTI SKID switch located on panel L2 provides 
electrical power for enabling the anti-skid portion of the braking 
system boxes A and B. The BRAKES MNA, MNB and MNC 
switches are positioned to ON to supply electrical power to the 
brake boxes A and B and to OFF to remove electrical power. The 
ANTI-SKID switch is positioned to ON to enable the anti-skid 
system and to OFF to disable the system. 

When weight is sensed on the main landing gear, the 
brake/anti-skid boxes A and B are enabled, permitting the main 
landing gear brakes to become operational. 

The main landing gear brakes controlled by the CDR or PLT 
brake pedals located on the rudder pedal assemblies at the CDR 
and PLT station. The pedals are adjustable by a handle. The 
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Panel 14 Panel 16 Panel 15 



braking commands are accomplished by the CDR or PLT 
initiating toe pressure on the top of the rudder pedal assembly. 
Each brake pedal (left and right) has four linear variable 
differential transducers (LVDT’s). The left pedal transducer unit 
will output four separate braking signals through the brake/skid 
control boxes for braking control of the two left main wheels. 
The right pedal transducer unit does likewise for the two right 
main wheels. When toe pressure is applied to the brake pedal, the 
transducers transmit electrical signals of 0 to 5 Vdc to the 
brake/anti-skid control boxes. The pedal with the greatest toe 
pressure becomes the controlling pedal through electronic OR 


circuits. The electrical signal is proportional to the toe pressure. 
The electrical output energizes the main landing gear brake coils 
proportionally to brake pedal deflection allowing the desired 
hydraulic volume to be directed to the main landing gear brakes 
for braking action. The brake system bungee at each brake pedal 
provides the braking artificial feel to the crew member. 

Each of the three hydraulic systems’ source pressure of 
155,250 millimeters of mercury (mmHg) (3,000 psi) is reduced 
by a regulator in each of the brake hydraulic systems to 77,625 
mmHg (1,500 psi). Hydraulic system Nos. 1 and 2 are the normal 
hydraulic supply to the brake system, with system No. 3 as the 
standby. Switching valves in each brake system provide 
automatic switching if either of the active hydraulic systems is 
lost. 

The anti-skid portion of the brake system provides optimum 
braking by preventing tire skid or wheel lock, and subsequent 
tire damage. 

Each main landing gear wheel has two speed sensors that 
supply wheel rotational velocity information to the anti-skid 
monitoring circuits. If wheel velocity is approximately 
30 percent below the average of all four wheels, the anti-skid 
control circuits consider that wheel is locked or in a skid 
condition. The anti-skid coil in that brake/skid control valve is 
then energized, reversing polarity of that brake coil and 
inhibiting the hydraulic pressure to the brakes of that wheel until 
that wheel’s velocity is increased again. The anti-skid control 
system also considers a flat tire. If that wheel’s velocity is 
approximately 30 percent below the average velocity of all four 
wheels for at least two seconds, the hydraulic pressure on the 
adjacent wheel is limited to 41,400 plus or minus 5,175 mmHg 
(800 plus or minus 100 psi) to prevent brake and/or tire damage. 

Anti-skid control is disabled between 10 to 15 knots (11 to 
17 mph) to prevent loss of manual braking during parking and 
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maneuvering. The anti-skid system control circuits contain fault 
detection logic. The ANTI-SKID yellow caution and warning 
light located on the flight deck display and control panel F4 will 
illuminate if the anti-skid fault detection circuit detects an open 
or short in a wheel speed sensor, open or short in a anti-skid 
control valve servo coil, or a failure in an anti-skid control circuit. 
A failure of the aforementioned items will only deactivate the 
failed circuit, not the total anti-skid control. If the BRAKE 
POWER switches are ON and the ANTI-SKID switch is OFF, the 
ANTI-SKID caution/warning light will illuminate. 


With one brake chamber on each wheel providing hydraulic 
pressure, the orbiter crew can perform a normal energy stop; 
however, the braking distance will be approximately 30 to 
40 percent longer. 

In a normal-energy stop with an 85,276-kilogram 
(188,000-pound) orbiter, beginning with initial braking at 
153 knots (176 mph), 871 meters (2,860 feet) is required to stop 
the orbiter with 77,625 mmHg (1,500 psi) of hydraulic pressure. 
An emergency stop with a 102,513 kilogram (227,000-pound) 

























































































































Space Shuttle Spacecraft Systems 



Panel L2 

ANTISKID 

ON 


Panel 14 

BRAKES 
MN A 
ON 


Panel 15 

BRAKES 
MN B 
ON 


Panel 16 

BRAKES 
MN C 
ON 


Panel F4 


'— 



© 

ANTISKID 

FAIL 

© 

V 



OFF 


OFF 


OFF 


OFF 


J L 



t _ 1=L 

Anti-Skid 

Brake Power 

Anti-Skid 

Anti-Skid 

Switch 

Switches 

Failure* 

Fail Light 

On 

Off 

On 

Off 

Yes 

No 

On 

Off 




• 




• 


• 

• 




• 


• 


• 



m 


• 

• 


• 


• 


• 



*Anti-Skid fault detection circuits detect 
any of the following failures: 

Open or short in a wheel speed sensor 
circuit 

Open or short in a skid control servo 
valve circuit 

Failure in an anti skid control circuit 

Note: A failure will deactivate only 
the failed circuit and not 
total anti-skid control 


**Applies only to 
brake power switches 
MN B, MN C, or both 
to be activated 


Anti-Skid Fail Light Status 


orbiter beginning with initial braking at 178 knots (204 mph), 
requires 1,330 meters (4,364 feet) to stop the orbiter with 
77,625 mmHg (1,500 psi) of hydraulic pressure. 

The brakes have five normal energy stop landings. One 
emergency stop landing will require brake refurbishment. 
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NOSE WHEEL STEERING 


The orbiter nose wheel is steerable upon landing. The nose 
wheel is electro-hydraulically steerable automatically through use 
of the general purpose computer (GPC) and flight control system 
AUTO mode. The nose wheel may also be steered by use of the 
CDR or PLT rudder pedals in the control stick steering (CSS) 
mode. 

Only hydraulic system No. 1 supplies hydraulic system 
pressure for steering the nose wheel in either of the 
aforementioned modes. If system No. 1 is inoperative, the CDR 
or PLT can apply the left and right main landing gear brakes, 
alternately, which will caster the nosewheel and provide nose 
wheel steering. 

The NOSE WHEEL STEERING switch on the flight deck 
display and control panel L2 enables the nose wheel steering 
solenoid control valves, which directs hydraulic system No. 1 
pressure to the nose wheel steering servo valve when the NOSE 
WHEEL STEERING switch is in the GPC position. The GPC 
position, in conjunction with the flight control system 
ROLL/YAW AUTO pushbutton switch/light indicator on panel 
F2 or F4, allows the AUTOLAND computer mode to provide 
steering commands to the nose wheel servo actuator when weight 
on the nose gear (main and nose gear proximity switches plus 
vehicle attitude) is sensed and the hydraulic pressure switch 
detects that the hydraulic pressure is at least 69,862 mmHg 
(1,350 psi). Position feedback is transmitted from the nose wheel 
steering actuator for position verification and fault detection. It 
is noted that if the hydraulic pressure falls to 51,750 plus or 
minus 7,762 mmHg (1,000 plus or minus 150 psi), nose wheel 
steering is disabled. When nose wheel steering is not activated, 
the nose wheel steering damping actuator prevents nose wheel 
shimmy and allows the nose wheel to free castor through plus or 
minus 10 degrees of rotation when differential braking is used. 
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Nose Wheel Steering Power 

When the NOSE GEAR STEERING switch is positioned to 
DIRECT, the nose wheel steering solenoid control valves are 
enabled, which directs hydraulic system No. 1 pressure to the 
nose wheel steering servo actuator. The DIRECT position, in 
conjunction with the flight control system ROLL/YAW CSS 
pushbutton switch/light indicator on panels F2 and F4 allows the 
CDR or PLT rudder pedals to provide steering commands 
directly from the steering command transducer on the rudder 
pedals to the servo actuator, providing hydraulic pressure to the 
steering actuator when weight on the nose is sensed. Position 


feedback is transmitted from the nose wheel steering actuator for 
position verification and fault detection. 


When the flight control system ROLL/YAW AUTO 
pushbutton switch/light indicator is depressed, it illuminates a 
white light. When the ROLL/YAW CSS pushbutton switch/light 
indicator is depressed, it illuminates a white light. Only 
ROLL/YAW AUTO or ROLL/YAW CSS can be selected at a 
time, not both simultaneously. 

When the NOSE WHEEL STEERING switch is in GPC or 
DIRECT and the nose wheel steering system fault detection logic 
detects loss of hydraulic pressure, open or short in the servo 
control valve circuitry, open or short in the position feedback, 
rate position error, open or short in the command transducer, 
broken linkage or loss of electrical power, the NWS (nose wheel 
steering) FAIL yellow caution and warning light on panel F2 will 
illuminate, and the nose wheel reverts automatically to free 
castor. 

If nose wheel steering has failed, the NOSE WHEEL 
STEERING switch is positioned to OFF, extinguishing the NWS 
FAIL yellow light. Nose wheel steering can then be accomplished 
by differential braking. In differential braking, the CDR or PLT 
applies toe pressure to the rudder pedals, alternately to the left 
and right main landing gear brakes; this will castor the nose wheel 
for nose wheel steering. When the NOSE WHEEL STEERING 
switch is in the OFF position, hydraulic system No. 1 pressure to 
the nose wheel steering system is off, allowing the nose wheel to 
be in the free castor mode. 

Heaters can be installed on the landing gear brake system for 
temperature control of the brake hydraulic system if they are 
required on later flights. 

The contractors for the landing gear are B.F. Goodrich, 
Troy, OH (main and nose landing gear wheel and main landing 
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gear brake assembly and the nose/main gear tires); Bertea Corp., 
Irvine, CA (main landing gear hydraulic uplock actuator, main 
landing gear strut actuator and nose landing gear uplock 
actuator); Menasco Manufacturing Co., Burbank, CA (main and 
nose landing gear shock struts and drag brace assembly); Sterer 
Engineering and Manufacturing, Los Angeles, CA (nose gear 


steering/damping and solenoid-operated landing gear uplock 
control valves); Crane Co., Hydro Aire, Burbank, CA (main 
landing gear brake antiskid system); Eldec Corp., Lynwood, WA 
(landing gear proximity switch); OEA, Denver, CO (nose gear 
uplock release pyro thruster); Scott Inc., Downers Grove, IL 
(main landing gear uplock release thruster actuator). 
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AVIONICS SYSTEMS 


The Space Shuttle avionics system controls, or assists in 
controlling, most of the Shuttle systems. Its functions include 
automatic determination of the vehicle status and operational 
readiness, implementation sequencing and control for the 
external tank and solid rocket boosters during launch and ascent, 
performance monitoring, digital data processing, communications 
and tracking, payload and system management, and guidance, 
navigation, and control, as well as electrical power distribution 
for the orbiter, external tank, and solid rocket boosters. 

Automatic vehicle flight control can be used for every phase 
of the mission except docking, which is a manual operation by 
the flight crew. Manual control-referred to as the control stick 
steering (CSS) mode-also is available at all times as a flight crew 
option. 

The avionics equipment is arranged to facilitate checkout, 
access, and replacement with minimal disturbance to the other 
subsystems. Almost all electrical and electronics equipment is 
installed in three areas of the orbiter: the flight deck, the forward 
avionics equipment bays in the mid deck of the orbiter crew 
compartment, and the aft avionics equipment bays in the orbiter 
aft fuselage. The flight deck of the orbiter crew compartment is 
the center of avionics activity, both in flight and on the ground, 
except during hazardous servicing operations before flight. 
Before launch, the orbiter avionics system is linked to ground 
support equipment through umbilical connections. 

The Space Shuttle avionics system consists of more than 
300 major electronic “black boxes” located throughout the 
vehicle, connected by more than 300 miles of electrical wiring. 
The black boxes are connected to a set of five computers through 
common party lines, called data busses. The black boxes offer 
dual or triple redundancy for every function. 


The avionics are designed to withstand multiple failures 
through redundant hardware and software (computer programs) 
managed by the complex of five computers; this is called a 
fail-operational/fail-safe capability. Fail-operational/fail-safe 
capability is provided by a combination of hardware and 
software redundancy. Fail-operational performance means that 
after a first failure in a system, redundancy management allows 
the vehicle to continue on its mission. Fail-safe means after a 
second failure, the vehicle still is capable of returning to a landing 
site safely. 

The status of the individual avionics components is checked 
by a systems monitoring computer program. The status of critical 
vehicle functions such as the payload door position, external 
tank and solid rocket booster separation mechanisms, and 
excessive temperatures for certain areas are monitored 
continuously and displayed to the crew. 

DATA PROCESSING SYSTEM 

The orbiter relies on computerized control and monitoring 
for successful performance. The data processing system (DPS) 
through the use of various hardware components and its 
self-contained computer programming (software) provides this 
monitoring and control. 

The data processing system consists of Five general-purpose 
computers for computation and control; two magnetic-tape mass 
memories for large-volume bulk storage: time-shared, serial 
digital data busses (essentially party lines) to accommodate the 
data traffic between the computers and other orbiter systems; 19 
multiplexer/demultiplexer units to convert and format data at 
various systems; three engine interface units to command the 
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Data Processing System 


orbiter main engines; and four multi-function television (cathode 
ray tube—CRT) display systems so the crew can monitor and 
control the vehicle and payload systems. 

The software stored in and executed by the orbiter 
computers is the most sophisticated and complex set of programs 
ever developed for aerospace use. The programs are written to 
accommodate almost every aspect of the Space Shuttle vehicle 
operations including vehicle checkout at the Rockwell Palmdale 
(CA) assembly facility, pre-launch and final countdown, turn¬ 
around activity at the Kennedy Space Center, and control during 
ascent, on-orbit, entry, and landing and abort or other con¬ 
tingency mission phases. 

In-flight programs monitor the status of vehicle systems; 
provide consumable computations; control the opening and 








closing of the payload bay doors; operate the remote manipula¬ 
tor system; perform fault detection and annunciation, provide 
for payload monitoring, commanding, control, and data acquisi¬ 
tion; provide antenna pointing for the various communications 
systems; and provide primary and backup guidance, navigation, 
and control for ascent, on-orbit, entry, landing, and abort. 

These computer programs are written so they can be 
executed by a single computer or by all computers executing an 
identical program in the same time frame. The multicomputer 
mode is used for critical phases such as launch, ascent, entry, and 
abort. 

The orbiter software for a major mission phase must fit into 
the 106,496-word central memory of each computer. Each 
computer consists of a central processor unit (CPU) and an 
input/output processor (IOP). The CPU performs the arithmetic 
and logical processing of data, provides control and handling of 
interrupts and program control of its corresponding IOP, and 
manages redundant systems such as sensors. The memory 
capacity of each computer CPU is 81,920 words. All data 
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transmissions between the computers and vehicle systems are 
performed by the IOP under control of the CPU. The IOP 
receives data from the CPU, formats it, and relays commands to 
vehicle systems. The IOP also receives data from the vehicle 
systems and formats it for the CPU. The memory capacity of 
each computer IOP is 24,576 words. 

To accomplish all of the computing functions for all mission 
phases, approximately 400,000 words of computer memory are 
required. To fit the software needed into the computer memory 
space available, computer programs have been subdivided into 
nine memory groups corresponding to functions executed during 
specific flight and checkout phases. As an example, one memory 
group accommodates final countdown, ascent, and aborts; 
another on-orbit operations; and another the entry and landing 
computations. Different memory groups support checkout and 
ground turnaround operations and system management func¬ 
tions. Thus, in addition to central memory stored in the 
computers themselves, 34,000,000 bytes of information can be 
stored in two mass memories. 

The orbiter computers are loaded with different memory 
groups from magnetic tapes containing the desired program. In 
this way all the software needed can be stored in mass memory 
units (magnetic tape machine) and loaded into the computers 
only when actually needed. Critical programs and data are loaded 
in both mass memories and protected from erasure. Normally, 
one mass memory is activated for use and the other is held in 
reserve. However, it is possible to use both simultaneously on 
separate data busses or communicating with separate computers. 
The data stored in the mass memories include prelaunch and 
preflight test routines, fault isolation diagnostic test programs, 
cathode ray tube (CRT) display formats, overlay program 
segments to be loaded during specific mission phases, and 
duplicate copies of resident on-line programs for initial loading, 
reloading, or reconfiguration of the computers. The mass 


memories are an advanced form of data storage and fill the gap 
between slow access drives of high storage capacity and discs or 
drums with fast access but relatively low storage capacity. In 
contrast to disc or drum memories, the mass memories consume 
power only when active. 

The DPS software is divided into two major groups, called 
system software group and applications processing software. 

At the top is the system software group, which consists of 
three sets of programs: the flight computer operating program 
(the executive), which controls the processors, monitors key 
system parameters, allocates computer resources, provides for 
orderly program interrupts for higher priority activities, and 
updates computer memory; the user interface programs, which 
provide instructions for processing crew commands or requests; 
and the system control program, which initializes each computer 
and arranges for the multicomputer operation during flight- 
critical periods. The system software group programs tell the 
computers how to perform and how to communicate with other 
equipment. 

The second level of memory groups is the applications 
processing software. This group contains (1) specific software 
programs for guidance, navigation, and control which are 
required for launch, ascent flight to orbit, maneuvering on orbit, 
entry and landing on a runway; (2) systems management pro¬ 
grams which contain instructions for loading memories in the 
main engine computers and for checking the instrumentation 
system in addition to aiding in vehicle subsystem checkout and in 
ascertaining that crew displays and controls perform properly 
and update the inertial measuring unit state vectors; (3) payload 
processing programs which contain instructions for control and 
monitoring of orbiter payload systems which can be revised 
depending on the nature of the payload; and (4) vehicle checkout 
programs which are required to handle data management, 






Space Shuttle Spacecraft Systems 



Data Processing Software 






































































Space Shuttle Spacecraft Systems 




Entry 

Trajectory 


Entry Entry 

Trajectory Trajectory 


Entry Entry 

Trajectory Trajectory 

4 5 


Vertical 

Situation 

1 


Vertical 

Situation 

2 


Operational Sequence Associated Software 


376 




















































Space Shuttle Spacecraft Systems 



performance monitoring, and special processing and display and 
control processing. 

The two software program groups are combined to form a 
memory configuration for a specific mission phase. The software 
programs are written in HAL/S (high-order assembly language/ 
Shuttle) especially developed for use in real-time space applica¬ 
tions. These programs are grouped by function and partitioned 
into memory configurations. When requested, memory is recon¬ 
figured from mass memory so operating sequences for the needed 
function can be overlaid into the main computer memory. 


The highest level of the applications software is the OPS 
(operational sequences) which is required to perform part of a 
mission phase. Each OPS is a set of unique software required to 
perform phase-oriented tasks. An OPS can be further subdivided 
into groups called major modes, each representing a portion of 
the OPS mission phase. As an example, the launch phase (OPS-1) 
is subdivided into six major modes. 

Each major mode has with it an associated CRT display 
which provides the flight crew with information concerning the 
current portion of the mission phase. The display function of 
OPS software presents a fixed format of data and configuration 
status on a CRT, which is not subject to flight crew manipulation 
and is used only to provide the flight crew with information. 

The specialist (SPEC) function of the OPS software is a 
block of software associated with one or more OPS which has an 
associated CRT display and enables the flight crew to monitor 
and manipulate the vehicle systems via item keyboard entries. 

The multifunction CRT display system provides the flight 
crew with the ability to interface with and control the onboard 
software, observe vehicle system data, and monitor error or fault 


messages. The system is composed of three components: display 
electronics units (DEU), keyboard units (KBU), and display units 
(DU), which include the CRTs. 

The flight crew has two keyboards, on the left and right 
sides of the flight deck display and control center console. There 
are three DU-CRTs on the flight deck forward display and 
control console. Each CRT is 127x177 millimeters (5x7 inches). 
There is also one keyboard and one DU-CRT at the aft side 
station flight deck display and control console. The three 
DU-CRTs at the forward console are connected to each of the 
forward center console keyboards. The DU-CRT at the aft 
station is connected to the keyboard at that station. 

The DU uses a magnetic-deflected electrostatic-focused 
CRT. When supplied with deflection signals and video input, the 
CRT will display alphanumeric and graphic information. Charac¬ 
ters can be flashed and the CRT brightness varied for individual 
characters. The CRT has a single-color (green) phosphor. 

The four DEUs provide storage of display data, the 
computer/keyboard unit and computer/display unit interface 
display generation, updating, and refreshing, keyboard entry 
error checking, and keyboard entry echoing to the DUs. 

The three keyboard units provide the crew with a con¬ 
trolling interface for software operations and management. Each 
keyboard has 32 momentary-contact (pushbutton) function and 
numeric keys. Using these keys, the flight crew can ask the 
computer more than 1,000 questions about the flight and 
condition of the vehicle. The DUs provide the flight crew almost 
immediate response to the inquiries through display graphs, 
trajectory plots, and prediction about flight progress. The flight 
crew controls the Space Shuttle system operation through the 
use of the keyboards. In conjunction with the DUs, the flight 
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crew can alter the system configuration, change data or instruc¬ 
tions in the computer main memory, change memory configura¬ 
tions corresponding to different mission phases, respond to error 
messages and alarms, request special programs to perform specific 
tasks, run through operational sequences for each mission phase, 
and request specific displays. 

The input-output processor (IOP) of each computer has 24 
independent processors, each of which controls one of the 24 
data busses used to transmit digital data between the computers 
and vehicle systems, and secondary channels between the 
telemetry system and units that collect instrumentation data. 
The data transfer technique uses time-division data multiplexing 
with pulse-code modulation. In this system, data channels are 
multiplexed together, one after the other, and information is 
coded on any given channel by a series of binary pulses 
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corresponding to discrete information. The information trans¬ 
mission word length is 28 bits. The first three bits provide 
synchronization and indicate whether the information is com¬ 
mands or data. The next five bits identify the destination or 
source of the information. For command words, 19 bits identify 
the data transfer or operations to be performed; for data words, 
16 of these 19 bits contain the data and 3 bits define the word 
validity. The last bit of each word format is for an odd parity 
error test. The 24 data busses are connected to each IOP via 
multiplexer interface adapters (MIAs) which receive, convert, and 
validate .the serial data in response to discrete signals calling for 
available data to be transmitted or received. The data busses are 
organized into seven groups: intercomputer communication, 
display keyboard, flight critical, mass memory, payload launch/ 
boost, and instrumentation. 

Interface adaptation between the data bus network and 
most vehicle systems is accomplished by multiplexer/ 
demultiplexers (MDM). The MDMs are used in numerous remote 
locations in the vehicle to handle the functions of serial data time 
multiplexing/demultiplexing associated with the digital data 
busses and for signal conditioning. The MDMs act as translators 
and put information on or take it off the data busses. For the 
development flight tests, there are 27 MDM’s on the orbiter and 
two on each SRB for a total of 31. In the operational configura¬ 
tion, there will be 23 MDM’s, thus subtracting the eight MDM’s 
that make up part of the DFI. 

The MDMs receive from the vehicle systems hundreds of 
analog signals which can be minus 5 to plus 5 Vdc, 28-Vdc 
discrete signals, and serial or digital words, and converts these 
into a digital-serial output (which is a digitized representation of 
the signals and data). The digital-serial outputs are transmitted 
via the data busses to the computers and to the pulse code 
modulation (PCM) master unit. 






The technique of transferring serial-digital computer data 
via the data busses to the MDMs and then to vehicle systems is 
called multiplexing. 

Each computer sends serial-digital downlist data through 
four instrumentation busses to the pulse code modulation master 
unit, where it is mixed with instrumentation and payload data 
and transmitted to ground downlink telemetry. 

The PCM also formats the vehicles operational instrumenta¬ 
tion and selected development flight instrumentation into serial 
digital for transmittal to telemetry. 


The four instrumentation busses also transmit non-flight- 
critical orbiter system data from the PCM master unit to each 
computer for display on the flight crew CRTs. The PCM master 
unit contains a programmable read-only memory (PROM) for 
accessing subsystem data, a random-access memory (RAM) in 
which to store system data, and a memory in which data from 
the computers are stored for incorporation in the downlink 
telemetry. 

The MDMs controlled by either the computers or pulse code 
modulation master unit are a demand response system via the 
data busses. A command from either can order the applicable 
MDM to collect data and transmit the data back to the 
controlling hardware. 

Uplink software provides for the ground to send commands 
and data to the orbiter via the S-Band transponder communica¬ 
tions link. The orbiter uplink software interfaces with network 
signal processors to the computers via one of the flight-critical 
MDMs. 


379 









Space Shuttle Spacecraft Systems 



Computer 1 


Computer 2 


Computer 3 


Computer 4 


Computer 5 


CPU 


CPU 


CPU 


CPU 


CPU 

IOP 


IOP 


IOP 


IOP 


IOP 


2 Data Buses: 


2 Data Buses: 


1 Data Bus (per GPC): 


4 Data Buses: 


2 Data Buses: 


5 Data Buses: 


8 Data Buses: 


GN&C 
Sensors 
and ^ 
Controls 


Mission f 
Event * 
Sequence \ 


-> 

MDM FF1 

-► 

MDM FF2 

-► 

MDM FF3 

-¥ 

MDM FF4 

-► 

MDM FA1 

-► 

MDM FA2 

-► 

MDM FA3 

-► 

MDM FA4 


MEC 1 


MEC 2 


*5 dedicated channels 


Legend 


Ground 


Mission 


Flight 


Display 


Mass Memory 


Inter-Computer 


Interface 


Critical 


Instrumentation* 


System 


Flight-Critical 


EIU 1 


EIU 2 


EIU 3 


Main Engine 
Interface 


Mass 

Memory 1 


Mass 

Memory 2 


DEU 1 


DEU 2 


DEU 3 


DEU 4 


Data Entry 
and Display 


DDU 1 


DDU 2 


DDU 3 


Primary 

Flight 

Displays 


CPU Central Processing Unit 

DDU Display Driver Unit 

DEU Display Electronics Unit 

EIU Engine Interface Unit 

GPC General-Purpose Computer 

GSE Ground Support Equipment 

I OP Input/Output Processor 

MCIU Manipulator Controller Interface Unit 

MDM Multiplexer/Demultiplexer 

MEC Master Events Controller 

PCM Pulse Code Modulation 


Operational 

Instrumentation 


PCM Master 

-<i 

1 


PCM Master 


2 


PCM Master 

Buses 

MDM 0A1 


MDM 0A2 


MDM 0A3 


MDM 0F1 


MDM 0F2 


MDM 0F3 


MDM 0F4 

4 - 


Payload Processor and 
Performance Monitor 


MDM PF1 


MDM PF2 


— Serial 
Digital 
Interface 
Buses 


MCIU 


Manipulator 

Control 


380 


GSE-Controlled 

Command 

Decoders 


MDM LF1 


MDM LAI 


nr 


Isolation 

Amplifier 




MDM LL1 


MDM LL2 


r 


3 “ 

Launch Processing 
GSE 

T 


MDM LR1 


MDM LR2 


Solid-Rocket Boosters 


| Solid-Ri 


Data Processing System 




) 




























































































































































































































































Space Shuttle Spacecraft Systems 



All data is time-tagged by three master timing units (MTU), 
which provide a Greenwich Mean Time (GMT) base as well as 
mission elapsed time and event time. The system software in each 
computer selects the GMT from one of the MTUs or from the 
computer’s own internal clock with frequent updates from the 
MTUs as a function of timekeeping redundancy management. 
The timekeeping software can be controlled by the flight crew 
via manipulation of the specialist function CRT display. The 
MTUs also supply synchronizing signals to other electronic 
circuits. 

All computer communications with the DU-CRT display 
system are transmitted and received over the display keyboard 
busses. 

The guidance, navigation, and control system is composed 
of the four orbiter computers and other major components 
which make up the primary flight control system. The computers 
use a program called the digital autopilot to control the vehicle 
through launch, ascent, on-orbit, deorbit, entry, and landing. The 
guidance, navigation, and control system provides automatic or 
manual (control stick steering) control of the vehicle in all flight 
phases. During launch most of the computer commands are 
directed to gimbal the main engines and solid rocket boosters. To 
circularize the orbit, in orbit, and for deorbit, the computer 
directs the orbital maneuvering system. At external tank separa¬ 
tion, in orbit, and during a portion of entry, vehicle attitude 
control commands are directed to the reaction control system. In 
atmospheric flight the computers direct the orbiter aerodynamic 
flight control surfaces. 

During critical mission phases (launch and entry), four of 
the computers are assigned to perform GN&C tasks, operating as 
a cooperative redundant set. One computer acts as a commander 
of a given data bus in the flight control scheme and initiates all 
bus transactions. The noncommander computers on the same bus 


listen to all incoming data that the commander requests. Thus, 
each response to a request by any computer is heard by all 
performing the same redundant operations and verified for 
consistently identical output. The computer redundancy manage¬ 
ment software module centers around the concept that each 
computer compares its outputs with the other computers in the 
set. If the comparison disagrees, this disagreement is displayed to 
the flight crew as a CRT message; however, processing continues. 

Each of the computers operating in a redundant set operates 
in synchronized steps and cross-checks results of processing 
about 440 times per second. If a computer operating in a 
redundant set fails to meet the synchronization requirements for 
redundant set operations, it would be removed from the set. 
Each computer performs about 325,000 operations per second 
during critical phases of the mission. 

As an example, Computers 1 through 4 are operating in a 
redundant set when Computer 1 fails to stay synchronized with 
the other three. Computer 1 software recognizes the disagree¬ 
ment and also recognizes that it has been voted failed by the 
other three computers. Computer 1, therefore, sets a self-fail vote 
and does not vote the other three computers failed. 

All intercomputer communications other than synchroniza¬ 
tion are transmitted and received over four specific buses. 
Cross-strapping of the four buses to the four computers allows 
each computer access to the status of the data received or 
transmitted by the other computers, making possible the 
verification of identical results among the four computers. The 
four computers are loaded with the same software programs. 
Each bus is assigned to one of the four computers in the 
command mode and the remaining computers operate in the 
listen mode for that bus. Each computer has the ability to receive 
data with the other three computers, pass data to the others, 
request data from the others, and perform any other tasks 
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required to operate the redundant set. No vehicle systems are 
connected to these buses. 

The flight-critical buses are directed into groups of four to 
be compatible with the grouping of the four computers. 
Commands to flight deck crew flight control system (dedicated) 
displays and the forward GN&C system as well as the data from 
the forward GN&C sensors are transmitted and received over one 
group of buses (flight-critical FC-1 through FC-4). The data 
commands to the aft GN&C system, as well as the data from the 
aft GN&C components, are transmitted and received over FC-5 
through FC-8 buses. Each bus in a group is assigned to a separate 
computer operating in a command mode. The computer in the 
command mode issues data requests and commands to the 
applicable vehicle systems over its assigned FC (dedicated) bus. 
The remaining three buses in each group are assigned to the 
remaining computers to operate in the listen mode. A computer 
operating in the listen mode can only receive data. Thus, if 
Computer 1 operates in the command mode on bus FC-1, it 
listens on the three remaining buses. In this manner, each 
computer commands on one bus of a flight-critical group and 
listens on the remaining three. 

Each flight-critical bus in a group of four is commanded by 
a different computer. There are multiple units of each GN&C 
hardware item (sensors, controllers, flight control effector) and 
each unit is wired to a different MDM and flight-critical bus. The 
MDM and bus can be assigned to another computer. The flight 
computer operating system in systems software in each of the 
redundant set computers activates a GN&C executive program 
and issues commands to the bus and MDM to provide a set of 
input data. Each MDM receives the command from the computer 
assigned to it, acquires the requested data from the GN&C 
hardware wired to it, and sends the data to all four computers. 


When the sets of GN&C hardware data arrive at the 
computers via the MDMs and data buses, the data is generally not 
in the proper format, units, or form for use by flight control, 
guidance, or navigation. A subsystem operating program for each 
type of hardware processes the data to make it usable by GN&C 
software. These programs contain the software necessary for 
hardware operation, activation, self-testing, and moding. The 
level of redundancy varies from two to four depending on the 
particular unit. The software which processes data from the 
redundant GN&C hardware is called redundancy management. 
This performs two functions: selects, from redundant sets of 
hardware data, one set of data for use by flight control, guidance, 
and navigation; and detects data which is out of tolerance, 
identifies the faulty unit, and announces the failure to the flight 
crew and to the data collection software. 

In the case of four hardware units, the redundancy 
management software utilizes three and holds the fourth in 
reserve and utilizes a middle value select until one of the three is 
bad, then uses the fourth. If one of the remaining three is lost, it 
would downmode to two and use the average of the two. If one 
of the remaining two were lost it would downmode to one and 
pass the only data it receives. 

The three engine interface units between the computers and 
the three main engine controllers accept computer main engine 
commands, reformat them, and transfer them to each main 
engine controller. In return, the engine interface units accept 
data from the main engine controller, reformat it, and transfer it 
to computers and operational instrumentation. Main engine 
functions such as ignition, gimbaling, throttling, and shutdown 
are controlled by the main engine controller internally through 
inputs from the guidance equations which are computed in the 
orbiter computers. 
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During non-critical flight periods in orbit, only one or two 
computers are used for GN&C tasks and another for payload 
operations and system management. The remaining three can be 
used either for payload management or deactivated on standby. 

The fifth onboard computer is used as a GN&C backup in 
the initial development flights; however, it also provides unique 
functions such as system non-critical function monitoring and 
payload command and monitoring. The fifth computer has a 
separate independent software design and coding activity to 
protect against generic software failures in the primary computer 
set. 


The payload in the orbiter may have up to five safety- 
critical status parameters hardwired, so that these parameters and 
others can be recorded as a part of the orbiter’s system 
management which is transmitted and received over the two 
payload buses. To accommodate the various forms of payload 
data, the payload data interleaver integrates payload data into 
the orbiter avionics so it can be transmitted to ground telemetry. 

The two master events controllers under computer control 
provide signals for arming and safing pyrotechnics, and for 
command and fire signals for pyrotechnics in separation 
processes. 

Data bus isolation amplifiers are the interfacing device 
among GSE, the solid rocket booster MDMs, and the orbiter 
launch data bus. They transmit or receive multiplexed data in 
any direction. The amplifiers enable multiplexed communica¬ 
tions over the longer data bus cables which connect the orbiter 
and GSE. The receiving section of the amplifiers detects low-level 
coded signals, discriminates against noise, and decodes the signal 
to standard digital data at very low bit error rate; the transmit 
section of the amplifiers then re-encodes the data and retransmits 
it at full amplitude and low noise. 
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Master Events Controller 

Data bus couplers couple the vehicle multiplexed data and 
control signals between the data bus and cable studs connected 
to the various electronic units. The couplers also provide 
impedance matching on the data bus, line termination, dc 
isolation, and noise rejection. 

Each CPU is 193 millimeters (7-1/2 inches) high, 257 milli¬ 
meters (10-1/8 inches) wide, and 497 millimeters (19-1/2 inches) 
long and weighs 25.85 kilograms (57 pounds). The IOPs are 
identical in size and weight to the CPUs. 

Each of the two mass memories is 193 millimeters (7-1/2 
inches) high, 294 millimeters (11-1/2 inches) wide, and 381 milli¬ 
meters (15 inches) long and weighs 9.97 kilograms (22 pounds). 
The MDMs are 330 by 254 by 177 millimeters (13 by 10 by 7 





































Space Shuttle Spacecraft Systems 



inches) and weigh 16.64 kilograms (36.7 pounds) each. The data 
bus isolation amplifiers are each 177 by 152 by 127 millimeters 
(7 by 6 by 5 inches) and weigh 3.4 kilograms (7-1/2 pounds). 
Each data bus coupler is 16.39 cubic centimeters (one cubic 
inch) in size and weighs less than 28 grams (one ounce). 

The five CPUs and IOPs are located in the crew compart¬ 
ment mid deck avionics bays 1,2, and 3 and are cooled by fans. 
The mass memories are located in the crew compartment mid 
deck avionics bays 2 and 3; each MM is mounted on a coldplate 
and cooled by a water loop. 

The forward flight-critical MDMs are located in the crew 
compartment mid deck avionics bays 1, 2, and 3. They also are 
mounted on coldplates and cooled by a water loop. The aft 
flight-critical MDMs are located in the aft fuselage avionics bays, 
are mounted on coldplates, and cooled by Freon-21 coolant 
loops. 


INSTRUMENTATION 

The instrumentation system consists of transducers, signal 
conditioners, pulse code modulation encoding equipment, fre¬ 
quency multiplexing equipment, PCM recorders, analog 
recorders, timing equipment, and onboard checkout equipment. 
The instrumentation system is made up of two separable 
functional systems: operational instrumentation (01) and 
development flight instrumentation (DFI). DFI will be used only 
for the initial development flights. The 01 and DFI systems 
interface with companion components, other avionics systems, 
external tank, solid rocket boosters, and ground support 
equipment. 

The 01 system senses and acquires, conditions, digitizes, 
formats, and distributes data for display, telemetry, recording, 


and checkout. It provides for PCM recording, voice recording, 
and master timing for onboard systems. The equipment consists 
of two pulse code modulation master units (PCMMU’s), two 
operations recorders, master timing unit, and various 
multiplexer/demultiplexers (MDM’s), signal conditioners, and 
sensors. 

The DFI system provides additional instrumentation for the 
initial development flights. This system senses and acquires, 
conditions, digitizes, formats, frequency-multiplexes, distributes, 
and records data. Its equipment consists of two PCMMU’s, three 
recorders, nine frequency division multiplexers, and various 
MDM’s, signal conditioners, and sensors. 

The dedicated signal conditioners (DSC’s) provide inputs to 
the 01 and DFI from such transducer signals as frequency, 
voltage, current, pressure, temperature (variable resistance and 
thermocouple), and displacement (potentiometer), 28- and 5-volt 
dc discretes. The signal conditioners convert their input signals to 
an analog signal of 0 to 5 volts dc or to a 28- or 5-volt dc discrete 
output signal. 

The output signals of the 01 DSC’s are directed to the flight 
deck crew displays, C/W system, and a corresponding MDM. The 
MDM’s convert the analog signal to serial digital data (a digitized 
representation of the applied voltage). The MDM’s send this serial 
digital data to a PCMMU upon request through the 01 data buses. 
When the MDM is addressed by the PCMMU, the MDM will 
select, digitize, and send the requested data to the PCMMU in 
serial digital form. 

The 01 PCMMU receives digital data from the 01 MDM’s, in 
addition to computer downlist data from the onboard 
computers, and combines them to form the PCM telemetry for 
the S-band downlink. The PCMMU controls the data received 
from the MDM’s; downlist data from the computers is under the 


384 





) 



Space Shuttle Spacecraft Systems 


) 


Network Signal 
Processor 


t 



Ku Signal Processor 
FM Signal Processor 
Payload 4 

Umbilical 


T-0 

Umbilical 


Payload 

Recorder 


Data Payload 
Interleaver 




Operations 




01 PCM 


Recorder 1 



DFI PCM 

Master Unit 




Operations 



Master Unit 



Recorder 2 




i 



Wideband 
Data 


FM 

Transmission 


i 


T-0 

Umbilical 


Frequency 

Division 


Multiplexer 1 _ 


T 


Multiplexer/ 

Demultiplexers 


Multiplexer/ 

Demultiplexers 

a 

A 

Signal 

Conditioners 


Signal 

Conditioners 



Wideband 

Data 


Subsystem 01 Measurements 
(Sensors) 


Subsystem DFI Measurements 
(Sensors) 


Instrumentation 


control of the flight software. All data received by the PCMMU is 
stored in memory and periodically updated. The PCMMU also 
sends data to the onboard computers on request. 

The 01 PCMMU has two formatter memories: pro¬ 
grammable read only and random access (RAM). The former is 
programmed only before launch; the latter is reprogrammed 
several times during flight. The PCMMU will use the format 
memories to downlink data from the computers and data from 
the 01 MDM’s into high-rate (128 kbps) and low-rate (64 kbps) 
PCM telemetry data streams. These data streams are sent to the 
network signal processor, which then sends the 128-kbps data to 
the operations recorders and either the 128-kbps or 64-kbps data 


to the S-band transponder for transmission to the ground. In 
later flights, the Ku-band transmitter will be used when the 
orbiter is in orbit. On the ground this data is recorded again and 
also monitored in real time at the Mission Control Center, 
Houston. 

Only one of the redundant 01 PCMMU’s and network signal 
processor’s operates at a time. The ones used are controlled by 
the crew through the flight deck display and control panel. 

It is noted that the primary port of an MDM operates with 
PCMMU 1 and the secondary port of an MDM operates with 
PCMMU 2. 
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Area 

Characteristics 

Signal 

Conditioning 

• 13 DSC's conditioning approximately 1200 channels approximately 

100 DFI measurements) 

• 6 WBSC to FDM for development flights, then to MDM for opera¬ 
tional flights 

• Approximately 45 high-level transducers 

• Distributes data to PCM data system, panel displays, C-W, flight- 
critical MDM's 

PCM Data 
System 

• Acquires data through 7 01 MDM's and 1 DFI MDM, approximately 
3250 measurements, of which 450 are DFI 

• Receives and provides data to 5 computers 

• Accepts payload data through PDI or payload data bus (Spacelab) 

• Provides output data in 64 and 128-kbps formats 

• Provides synchronization to PDI and NSP 

• Provides data to NSP and T-0 umbilical 

Payload 

Data 

Recorders 

• Receives data directly from payload or PLSP 

• Provides data to GPC's and PCM 

•Stores 3 channels of engine data at 60-kbps rate 

•Stores interleaved voice and data at 96,128, or 192-kbps rate 

• Stores payload data 

• Provides for playback of recorded data during and after mission 

Master 

Timing 

• Provides time reference to computers, OI/DFI PCM, DFI FDM's, 
display panel, and payload 

• Provides synchronization to instrumentation and other subsystems 

• Provides onboard reference for doppler measurements 


OI System 


On later flights, a payload data interleaver will accept data 
simultaneously from up to five attached and one detached 
payload, interleave it, and send it to the PCMMU. The input data 
is in serial digital data streams. Data temporarily stored in the 
PCMMU memory can be accessed by the PCMMU telemetry 
formatter and by the onboard computers. The payload data 
interleaver is programmed on board from mass memory via the 
computers to select specific data from each payload PCM signal 
and store it within its buffer memory locations. 

The OI PCMMU’s receive a synchronization clock signal 
from the master timing unit. If this signal is not present, the 


Area 

Signal 

Conditioning 


Characteristics __ 

• Approximately 2040 dedicated signal conditioning channels 

• Approximately 700 strain gauge channels 
•Approximately 670 wideband channels (includes 135 strain) 
•Approximately 150 transducers (high-level) 

• Data distributed to digital PCM and wideband FDM data 


systems 


Digital PCM 
Data System 


Wideband FDM 
Data System 


Wideband 

Recorders 


• Digitizes and transmits approximately 2570 (low-frequency) 
measurements 

• Data acquired through 6 DFI MDM's 

• Data transmitted via hardline (ground checkout) and 
telemetry link at 128 kbps 

• Data stored on PCM recorder 

• Accepts approximately 525 wideband (high-frequency) 
measurements for multiplexing and recording 

• Ascent system has 105 launch-associated measurements on all 
flights and approximately 280 measurements shared over 
three sharing programs 

• Provides capability via hardline (ground checkout) to 35 
multiplexed outputs 

• Ascent recorder stores 7 multiplexed orbiter channels, 5 ET 
multiplexed channels, and 2 SRB multiplexed channels for 
ground playback via umbilical hardline 

• Mission recorder stores 28 multiplexed orbiter channels for 
ground playback via umbilical hardline 


DFI System 

PCMMU provides its own timing and continues to provide timing 
signals to the payload data interleaver and network signal 
processor. 

There are many different PCM telemetry formats that 
control the measurement groupings the PCMMU assembles into 
the 128-kbps and 64-kbps data streams for different mission 
phases. Those to be used for each mission are stored in the 
onboard computer’s mass memory. When the ground or flight 
crew want to change the format, a command is sent to the 
computers, which will then load the desired format from mass 
memory into the formatter RAM of the PCMMU. 
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The five onboard computers are capable of data processing. 
They perform programmed computations and then prepare the 
data for telemetry transmission by means of a downlist. Four of 
the computers are assigned to the primary flight control system 
in the orbiter and provide primary downlist data. The fifth 
computer is assigned to the backup flight control system in the 
initial development flights and to systems management and 
payload management in later flights and provides downlist data. 
The computer downlist data consists of a table of values 
compiled in the computer. The format can be changed by ground 
command or by the flight crew. The downlist data is sent from 
the computers to the PCMMU, where it is combined with 
operational instrumentation data to form thfe PCM downlink data 
stream. 


The network signal processor receives the PCMMU 128-kbps 
and 64-kbps telemetry data streams and also one or two analog 
voice channels from the orbiter audio central control unit. The 
processor converts the analog voice signals to digital voice signals, 
time-division multiplexes them with the PCM telemetry data, and 
sends the composite signal to the S-band transponder for 
downlink transmission. The total data rate of the composite 
signal will be either 192 kbps (high rate) or 96 kbps (low rate). 
The 128-kbps telemetry plus two 32-kbps voice channels equal 
the 192-kbps total. The 64-kbps telemetry plus one 32-kbps 
voice channel equal 96 kbps total. The downlink rate from the 
network signal processor can be switched by ground command at 
any point in the data cycle. The processor also outputs to the 
operations recorders either the 128-kbps telemetry or the 
192-kbps composite signal. Only one processor operates at a 
time. 


The DFI dedicated signal conditioners’ output signals are 
directed to the DFI multiplexer-demultiplexer, which convert 

; 


them into serial digital data and send them via the DFI data 
buses to the DFI PCMMU. The DFI PCMMU formats the data 
into a 128-kbps data stream and outputs it to a DFI PCM 
recorder and to a special frequency division multiplexer. The 
latter is used to transmit the data to ground stations on the DFI 
S-band FM transmitter and the S-band downlink. On the ground, 
this data is recorded again and selected parameters are sent to the 
Mission Control Center in Houston for real-time monitoring. 

The DFI PCMMU also receives timing from the master 
timing unit; however, it will provide its own timing if the signal is 
not present. Only one of the redundant DFI PCMMU’s operates 
at a time, the one in use selected by the flight crew. 

Wideband signal conditioners provide input signals to the 
DFI MDM’s, accommodate low level accelerometer, vibration, 
and acoustic signals, convert them, and send an analog output 
signal of 0 to 5 volts dc to the applicable frequency division 
multiplexer. 

The strain gauge signal conditioners in the DFI accommo¬ 
date low level signals from the strain gauges, convert them, and 
provide an analog output signal of 0 to 5 volts dc. Selected strain 
guage analog signals are sent to a corresponding MDM which 
converts the analog signal into a digital serial output. The digital 
serial output is received by the DFI data buses and transmitted to 
the DFI PCMMU which formats the data into the 128 kbps data 
stream. Other strain gauge signal conditioners send an analog 
signal of 0 to 5 volts dc to a corresponding FDM. 

The nine DFI MDM’s frequency multiplex the analog data 
for wideband recording to the wideband ascent recorder and 
wideband mission recorder. The FDM FMF-1 receives 128-kbps 
digital PCM data from the DFI PCMMU as well as 15 selected 
analog inputs from various signal conditioners. FDM FMF-1 
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sends this multiplexed composite signal to the DFI S-band FM 
transmitter for transmission to the ground stations on the S-band 
DFI FM downlink. This composite is also sent to the ascent and 
mission recorders. 

MASTER TIMING UNIT. The master timing unit is a stable 
crystal-controlled timing source for the orbiter. It provides serial 
time reference signals to the onboard computers, PCMMU’s, 
FDM’s, and various time display panels. It also provides 
synchronization to instrumentation and other systems. It 
includes separate time accumulators for Greenwich mean time 
(GMT) and mission elapsed time (MET), which can be reset or 
updated from the ground via uplink through the onboard 
computer or by the flight crew through the use of their flight 
deck display and control panel keyboard and CRT (cathode ray 
tube) time displays. 

The signal flows from the 4.608-MHz oscillators to the 
output of the GMT and MET accumulators. The three indepen¬ 
dent GMT and three independent MET counters operate simul¬ 
taneously. Separate time accumulators are used for each GMT 
and MET clock, and they accumulate time in days, hours, 
minutes, seconds, and milliseconds. The GMT capability is 366 
days, 23 hours, 59 minutes, 59 seconds, and 999.875 milli¬ 
seconds. For MET, the capability is 365 days, 23 hours, 59 
minutes, 59 seconds, and 999.875 milliseconds. Both can be 
updated and reset by ground equipment before flight or from the 
onboard controls by the flight crew. During flight, the GMT and 
MET accumulators are updated at a predetermined time by 
uplink and onboard computer or by voice command and entered 
through the flight deck display and control panel keyboard and 
CRT display. 

FREQUENCY MODULATION SIGNAL PROCESSOR. The 

FM signal processor receives inputs and processes data from three 
sources: the three engine interface units, the video switching 
unit, and the recorder dump from the operations recorders. It is 
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DOD - Department of Defense 

Frequency Modulation Signal Processor 

commanded to select one of these sources at a time for output to 
the S-band FM transmitter for transmission to the ground 
stations on the S-band FM downlink. The output is then either 
three channels of main engine data at 60 kbps each, real-time 
television from the onboard TV cameras, or operations recorder 
dumps (128-kbps PCM telemetry), 192-kbps composite data, or 
one channel of main engine data at 60 kbps. 


OPERATIONS RECORDERS. There are two of these 
recorders (also referred to as maintenance/loop recorders) used 
for serial recording and dumping of digital voice and PCM data. 
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The recorders normally are controlled by ground command, but 
they can be commanded by the flight crew through the flight 
deck display and control panel keyboard or by switches on a 
recorder panel. Input to the recorders is from the network signal 
processor, either 128-kbps PCM data or a 192-kbps composite 
signal which includes the 128-kbps PCM data and two 32-kbps 
voice channels. The network signal processor receives the PCM 
data from the 01 PCMMU and the voice signals from the audio 
control center. In addition, operations recorder No. 1 receives 
three channels of main engine data at 60 kbps during ascent. 

In the maintenance/loop mode, one is selected as a 
maintenance recorder while the other is designated a loop 
recorder. The latter records the serial output of the 01 PCMMU 
continually for temporary storage. This data is recorded in loop 
fashion by switching sequentially through tracks 12, 13, and 14. 
The loop recorder also will record digital data from the three 
engine interface units at 60 kbps during ascent, but not simul¬ 
taneously with the loop function. The maintenance recorder is 
used for permanent storage of two types of data: anomaly data 
from the loop recorder dump, and quick-look PCM data. When 
the 11th track of the 14 data tracks on the maintenance recorder 
is filled, it sends a signal to alert the user to interchange the loop 
and maintenance functions between the two recorders. The 
functions of recorders can be interchanged by uplink commands 
via the network signal processor or by the flight crew. 

The operations recorders can be commanded to dump 
recorded data from one recorder while continuing to record 
real-time data on the other. The dump data is sent to the 
FM signal processor for transmission to the ground station via the 
S-band FM transmitter on the S-band FM downlink. When the 
ground has verified that the data they received is valid, the 
operations recorders can use that part of the tape to record 
new data. 


A single recorder can store and reproduce digital and analog 
data both singly and in combination at many rates. 

The single recorder function will be used for the first 
development flight; however, both recorders may be operated in 
a maintenance/loop function. 

Recorder functions can be summarized as follows: 

• Data In, Recorder No. 1: 

— Accepts three parallel channels of engine data at 
60 kbps during ascent 

— Accepts 128/192 kbps of interleaved PCM data 
and voice which serially sequences from Track 4 
to Track 14. 

— Accepts real-time data from network signal 

processor (plus voice in development flights). 
Recording time is 32 minutes for parallel record 
and 5.8 hours for serial record on Tracks 4 
through 14 at 381 millimeters (15 inches) per 
second. 

• Data In, Recorder No. 2: 

— Accepts 128/192 kbps of interleaved PCM voice 
and data which serially sequences from Track 1 
through Track 14. 

— Accepts real-time data from network signal 

processor (plus voice on development flights). 
Recording time is 7.5 hours at 381 millimeters 
(15 inches) per second for serial record on 
14 tracks. 

• Data Out, Recorder No. 1: 

— In flight payback of engine interface unit data 
and network signal processor digital data via 
S-band FM transponder and in later flights via 
Ku-band transmitter. 
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— In operational flights, in-flight playback of 

anomaly PCM data for maintenance recording; 
playback of data serially to GSE T-0 umbilical. 

• Data Out, Recorder No. 2: 

— In-flight playback of digital data via S-band FM 
transponder and in later flights via Ku-band 
transponder. 

— In operational flights, in-flight playback of 

anomaly PCM data for maintenance recording; 
playback of data serially to GSE T-0 umbilical. 

• Recorder Control: 

— Manual control from mission specialist flight deck 
aft station display and control panel. Uplink and 
onboard computer keyboard control. 

- Recorder speeds of 190, 381, 609, and 3,048 

millimeters (7.5, 15, 24, and 120 inches) per 

second provided by hardware programs plug 
direct command. 

The tape recorders contain a minimum of 731 meters 
(2,400 feet) of 12 millimeters (0.5-inch) by 1-mil magnetic tape. 
They operate at 609 millimeters (24 inches) per second in the 
record mode, and 3,048 millimeters (120 inches) per second in 
the playback mode. 

PAYLOAD RECORDER. The payload recorder is not used 
in the initial development flights, although it will be on board. It 
is identical to the operations recorders in hardware and will be 
used to record payload data and dump in flight via the S-band 
transponder or in later flights the Ku-band transmitter. 

The payload and recorder capabilities are: 

• Data In: 






— Accepts digital inputs of 64 kbps either serial or 
parallel up to 14 tracks. 

— Accepts analog data from 1.9 kHz to 2 MHz 

either serial or parallel up to 14 tracks. 

_ Serial/para!lei track programming is determined 

by premission payload distribution panel wiring. 

— Record time is 32 minutes for parallel record or 
7.5 hours for serial record at 381 millimeters 
(15 inches) per second. 

• Data Out: 

— In-flight playback of digital data via S-band 

transponder or in later flights via Ku-band 
transmitter. 

— In-flight playback (analog/digital) data to payload 
distribution panel; playback of data to GSE via 
T-0 umbilical. 

• Control 

— Manual control from mission specialist flight deck 
aft station display and control panel. 

— Uplink and computer keyboard by computers. 
Recorder speeds of 381, 762, 1,524 and 3,048 
millimeters (15, 30, 60, and 120 inches) per 
second provided by hardware program plug. 
Recorder hardwired for continuous run modes. 

DFI RECORDERS. Three recorders are used in the DFI 
system to provide PCM and wideband recording: PCM, wideband 
and ascent, and wideband mission recorders. The operations of 
these recorders can be controlled only by the flight crew through 
the use of switches on the flight deck display and control panels. 
The DFI recorders cannot be dumped in flight; they are played 
back via the GSE T-0 umbilical after the orbiter has landed. 
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The PCM recorder is used to record 128-kbps PCM data 
from the DFI PCMMU. 

The two wideband recorders are used to record the output 
of the frequency division multiplexers. The wideband ascent 
recorder will operate during ascent only. 

It will record either continuously or in one of two 
automatically timed intervals selected by the crew. The two 
intervals are a high-sample mode, which automatically turns the 
recorder on for 10 seconds, off for five minutes, on again for 
10 seconds, etc., and a low-sample mode, which automatcially 
turns the recorder on for 10 seconds, off for 10 minutes, etc. The 
purpose of this switching is to save tape. The recorder has 
14 tracks which are recorded serially, and each track will fill up 
in 32 minutes. This means that the recorder can be operated for a 
total period of about 7-1/2 hours. 

All its tracks record in parallel. It will operate for only 
32 minutes before all the tracks become full. When the recorder 
reaches the end of tape, it will shut itself off automatically and 
will not be used again during the flight. 

The wideband mission recorder can be operated only in a 
continuous mode or shut off by a switch on the flight deck 
display and control panel. It can be operated only for a total of 
two hours before all the tracks become full. 

EQUIPMENT LOCATION. Instrumentation equipment, ex¬ 
cept for sensors and selected dedicated signal conditioners, are 
located in the forward and aft avionics bays. The DFI equipment 
is installed in the aft avionics bays and special containers located 
in the forward fuselage mid-deck crew compartment and the mid 
fuselage. Sensors and dedicated signal conditioners are located 
throughout the orbiter in areas selected on the basis of 
accessibility, minimum harness requirements, and functional 




requirements. Effective use of remote data acquisition techniques 
was considered for optimizing equipment location. The factors 
which were considered in determining equipment location were 
weight, power, physical size, redundancy, and wire density and 
length to each compartment and interconnect wiring. 

The abbreviation OA refers to operational, aft, OF to 
operational forward, OL to operational left, OR to operational 
right, OM to operational mid, DF to development forward, DL to 
development left, DR to development right, FMF to frequency 
multiplexer forward, FMC to frequency multiplexer center, FMR 
to frequency multiplexer right, DL to development left, DR to 
development right, and DC to development center. 

COMMUNICATIONS 

The S-band system is the primary means of communications 
between the orbiter and the ground tracking stations during the 
ascent, orbital, and entry phases of the flight. 

There is one uplink from the ground tracking stations to the 
orbiter, which is phase-modulated (PM) and provides commands, 
voice, and a coherent ranging signal to the orbiter. 

There are three downlinks from the orbiter to the ground 
tracking stations. One is PM and provides voice, telemetry, 
two-way doppler, and a coherent ranging signal. The other two 
are frequency modulated (FM) because they are used for 
transmission of wideband data. One FM downlink provides 
operational real-time Space Shuttle main engine data during 
ascent, real-time video (television), or operations recorder dump 
data. The remaining FM downlink provides real-time develop¬ 
ment flight instrumentation (DFI) data. 

In addition to S-band, the orbiter has an ultra-high 
frequency (UHF) communication system which is used only for 
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air-to-air and air-to-ground voice communications and a Ku-band 
communications system, which will be used in conjunction with 
the Tracking and Data Relay Satellite (TDRS) system in later 
flights. The UHF is used after reentry during the approach and 
landing phase of the flight. The air-to-ground voice communi¬ 
cation takes place between the orbiter and the landing site 
control tower and the orbiter and chase aircraft which assist the 
orbiter flight crew in landing the orbiter and the air-to-air voice 
communication takes place between the orbiter and extra¬ 
vehicular activities (EVA’s). In the prelaunch phase, the orbiter 


flight crew utilizes the launch umbilical for communications with 
the ground support and operations personnel until the moment 
of liftoff. 

S-BAND SYSTEM. The S-band operates in the S-band 
portion of the radio frequency spectrum of 1700 to 2300 MHz. 

The uplink from the ground tracking stations will be 
phase-modulated on a center carrier frequency of either 
2106.4 MHz (primary), or 2041.9 MHz (secondary) for the 
NASA Space Tracking and Data Acquisition Network (STDN) 
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ground stations and 1831.8 MHz (primary) or 1775.7 MHz 
(secondary) for the Department of Defense (DOD) (Air Force 
Satellite Control Facility-SCF) ground stations. 

The orbiter can transmit a PM downlink and two FM 
downlinks simultaneously. The PM downlink will be on a center 


carrier frequency of 2287.5 MHz (primary) or 2217.5 MHz 
(secondary) for the SCF ground stations and 2287.5 MHz 
(primary) or 2217.5 MHz (secondary) for the NASA STDN 
ground tracking stations. The FM downlinks are on a center 
carrier frequency of 2250.0 MHz (FM operational transmitter) 
and 2205.0 MHz (DFI transmitter). 



Development Flight Instrumentation in Payload Bay 
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FM Downlink: 

Real-Time Engine Data 
or Television or OI-PCM 
or Playback of Engine 
Data or Recorded High 
Rate Data 


DFI FM Downlink: 
Real-Time DFI Data 
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Telemetry, Two-Way 
Coherent Ranging, Two- 
Way Doppler 


PM Uplink: Commanding, Voice, 
Two-Way Doppler, Two-Way 
Coherent Ranging 
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Orbiter FM 

Downlink Frequencies: 
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(FM 01 Transmitter) 
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(FM DFI Transmitter) 
(128 kpbs/192 kpbs) 


Orbiter PM 

Downlink Frequencies: 
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DOD SCF (Air Force 
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Uplink Frequencies: 
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PM Uplink (72/32 Kbps) 
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STDN Ground Station 
(NASA) PM Uplink Frequencies: 
2041.9 MHz (Secondary) 
2106.4 MHz (Primary) 


S-Band Radio Frequencies 

The PM uplink provides for commanding and voice trans¬ 
missions from the ground stations to the orbiter. The PM 
downlink provides for telemetry and voice transmissions from 
the orbiter to ground stations. 


The S-band system is the only system for command 
reception until the Ku-band system is installed in later flights for 
use in .conjunction with the TDRS. All MCC-H (Mission Control 
Center-Houston) uplink commands are multiplexed with digital 
voice and transmitted on the S-band PM uplink. The S-band 
system removes the voice and transfers the commands to the 
onboard orbiter computers. The computers route the commands 
to the intended systems. 
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The S-band PM uplink originates from an STDN remote 
station, NASA, or at an DOD SCF remote station. Each type of 
remote station has a choice of two uplink frequencies for data 
transfer. The frequency selection is under MCC-H control. The 
S-band uplink transfers the high data rate of two voice channels 
and commands (72 kbps—kilo bits per second) or low data rate 
of one voice channel and commands (32 kbps), two-way doppler, 
and two-way tone ranging. 

The S-band PM downlink can originate from one of two 
S-band transponders aboard the orbiter. Each transponder can 
downlink on a frequency of 2217.5 MHz or 2287.5 MHz, but not 
both at the same time. The S-band PM downlink transfer 
high-data-rate telemetry plus two voice channels (192 kbps) or 
low-data-rate telemetry and once voice channel (96 kbps) and 
two-way doppler, and two-way ranging. 

The S-band FM downlink can originate from three FM 
transmitters on board the orbiter. Two are tuned to 2250.0 MHz 
and one is tuned to 2205.0 MHz. The S-band FM downlinks 
transfer real-time engine data or television or operational 
instrumentation PCM (128 kbps) or playback of engine data or 
recorded high-rate data (192 kbps) and DFI (128 kbps). 

Having two S-band uplink and downlink frequencies pre¬ 
vents interference when two Space Shuttle orbiters are operating 
at the same time. One Space Shuttle orbiter could select the high 
set of frequencies and the other could select the low set of 
frequencies. 

The two identical S-band transponders receive and transmit 
the PM uplink signal and downlink signal. Only one transponder 
operates at a given time; the other transponder is a redundant 
backup. The selected transponder transfers the uplink commands 
and voice to the NSP (network signal processor), receives the 
downlink telemetry and voice from the NSP, retransmits on a 


coherent frequency for the two-way doppler, and retransmits the 
two-way tone ranging signals. 

The two onboard NSP’s receive commands and transmit 
telemetry data to the selected S-band transponder. Only one NSP 
operates at a time. The selected NSP converts analog voice from 
the onboard audio central control unit (ACCU) to digital voice 
and multiplexes the same digital voice with operational instru¬ 
mentation telemetry from the pulse code modulation master unit 
(PCMMU). The selected NSP converts digital voice to analog 
voice for the ACCU and crew intercommunication and decodes 
commands for the onboard computers. 

The PM uplink and PM downlink are normally coherent so 
that the frequency of the downlink is directly proportional to 
the uplink frequency. The S-band transponder provides a 
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S-Band System 










coherent turnaround of the uplink carrier frequency. This is 
necessary for the two-way doppler (change of frequency varying 
with velocity) data. By measuring the uplink frequency and 
knowing what downlink frequency to expect from the orbiter, 
the ground tracking station can measure the double doppler shift 
that takes place and use that to calculate the radial velocity of 
the orbiter with respect to the ground station. These links are 
phase-modulated so that the S-band carrier center frequency will 
not be affected by the modulating wave. It would be impossible 
to obtain valid doppler data if the S-band carrier center 
frequency were affected by the modulating technique. 







The S-band also provides a subcarrier for two-way tone 
ranging. The ground will uplink ranging tones at 1.7 MHz and 401 

compute vehicle slant range from the time delay in receiving the 
returned 1.7-MHz tones to determine orbiter range. Orbiter 
azimuth is determined from the ground tracking station antenna 
angles. A C-band skin tracking mode is also provided from the 
ground tracking stations to track the orbiter. 


Frequency modulation is an ideal method to use for 
transmission of wideband data such as real-time video (television) 
and this is why the orbiter also has FM downlinks. There are two 
FM downlinks because it would be difficult to put all the 
wideband data on one link. After the initial development flights, 
the DFI equipment will be reduced greatly to a limited system 
and there may no longer be a need for the additional DFI FM 
downlink. 

The signals received from the FM signal processor are used 
to firquency-modulate the carrier in the FM transmitter for 
transmission, via one of the S-band hemispheric antennas to the 
ground tracking stations on the S-band FM downlink. The FM 
transmitter is used to transmit real-time engine data, real-time 
video (television), or operations recorder dump data. A Ku-band 
system will be added in later flights in conjunction with the 
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TDRS system. This will provide an alternate system for television 
transmission. The frequency modulated trasmitter carrier opera¬ 
tes on the S-band frequency of 2250.0 MHz. Whenever the FM 
transmitter is active, the S-band antenna mechanism will transfer 
the signal to whichever hemispheric antenna is closest to the 
most direct line of sight to the ground tracking station. 


The multiplexed composite signal from the frequency 
division multiplexer (FDM) is used to frequency-modulate the 
carrier in the DFI transmitter for transmission, via one of the 
S-band hemispheric antennas to the ground tracking stations on 
the S-band DFI FM downlink. The DFI transmitter carrier 
operates on the S-band frequency of 2205.0 MHz. It transmits 
DFI data on the S-band DFI downlink. Whenever the DFI 
transmitter is active, the S-band antenna mechanism will transfer 
the signal along with the operational FM to whichever hemis¬ 
pheric antenna is closest to the line of sight to the ground 
tracking station. 

Both the FM transmitter and DFI transmitter can be active 
at the same time. If they are, there will be two S-band FM 
downlinks being transmitted to the ground simultaneously from 
the same hemispheric antenna. 

The S-band antenna switch assembly provides the signal 
switching among the two S-band transponders and any one of 
four quadrant antennas and among the two FM transmitters and 
either of two hemispheric antennas. The quadrant and hemis¬ 
pheric antenna switchings are accomplished independent of each 
other. The proper quadrant and hemispheric antenna to be used 
is selected automatically under onboard computer control, by 
ground command, or manually by the flight crew utilizing 
displays and controls on the flight deck. 

In the automatic mode, the onboard computer selects the 
proper quadrant antenna to be used whenever an S-band 
transponder is active and the proper hemispheric antenna to be 



S-Band Antenna Switch 


used whenever an FM transmitter is active. The antenna selection 
is based upon the computed line of sight to the desired ground 
station. The antenna switching commands are sent to the switch 
assembly via multiplexer/demultiplexers (MDM’s). 

There are seven S-band antennas on the orbiter: four 
quadrant, two hemispherical, and one payload. The quadrant 
antennas are located on the forward fuselage on the outer skin 
approximately 90 degrees apart. In the orbiter on the flight deck 
looking out the front windows, the quadrant antennas are to the 
upper right, lower right, lower left, and upper left. The four 
antennas are the radiating elements for the S-band PM downlink 
and for receiving the S-band PM uplink. The two hemispherical 
antennas are located on the forward fuselage on the outer skin 
approximately 180 degrees apart. On the flight deck, the 
hemispherical antennas would be above the head (upper) and 
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below the feet (lower). The two hemispherical antennas radiate 
the S-band downlink. All the antennas are covered with thermal 
protection system. 

The basic difference between the two types of antennas is 
that the hemispheric antennas have a larger beam width, while 
the quadrant antennas have a highers antenna gain. The hemis¬ 
pheric antennas are so-called because there are two of them, one 
on top of the orbiter and one on the bottom. The quadrant 
antennas are so-called because there are four of them, two on 
each side of the orbiter, one on the upper half and one on the 
lower half of each side, which provides nearly total coverage in 
all directions. 

The payload antenna is located in the forward fuselage on 
the outer skin, just aft of the upper hemispherical antenna. It will 
be used as the radiating/receiving element for S-band payload 
forward, return links and with detached payloads. This antenna 
will be used in later flights. The payload antenna is also covered 
with thermal protection. 

The S-band RF link is pulse-modulated with the high-data- 
rate bit stream or the low-data-rate bit stream. The high data rate 
contains two 32-kbps digital voice channels multiplexed with the 
128-kbps telemetry on the downlink and two 32-kbps digital 
voice channels multiplexed with 8-kbps command on the uplink. 
The low data rate contains one 32-kbps digital voice channel 
multiplexed with 64-kbps telemetry on the downlink and one 
24-kbps digital voice channel multiplexed with 8-kbps command 
on the uplink. 

The network signal processor provides the interface to the 
audio distribution system with the S-band communications link. 
The NSP receives either one or two analog voice signals from the 
ACCU’s for downlink transmission, depending on whether one or 
both of ,the air-to-ground channels are being used. The NSP 


) 


) 



Network Signal Processor 

converts these analog voice signals to digital voice signals, 
time-division-multiplexes them with PCM telemetry, and sends 
the composite signal to the S-band transponder. On the uplink, 
the NSP does just the reverse. It receives the composite signal 
from the S-band transponder and outputs either one or two 
analog voice signals to the ACCU. This composite uplink signal 
also has ground commands, which the NSP sends to the onboard 
computers. 

A UHF (ultra-high-frequency) system will be in operation 
during ascent, on orbit, and entry as an alternative to S band for 
voice and commands. The UHF system is an analog voice system. 

AUDIO SYSTEM. It is through the audio distribution 
system that the flight crew can communicate with each other 
(intercom) as well as with ground support personnel. The system 
also provides for reception of caution and warning (C/W) aural 
tone signals in the event of an equipment malfunction or 
emergency, provides for reception of TACAN (tactical air 
navigation) identification signals from the ground tracking 
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station, and, in later flights, provides for a communication with 
attached payload (Spacelab), payload bay, and docking ring. 

The audio distribution system interfaces with the S-band 
communications system and in later flights with Ku-band 
communications system via the NSP to provide transmission and 
reception of external air-to-ground voice signals. It also interfaces 
with the UHF communication systems via the UHF transceiver 
for transmission and reception of external air-to-ground and 
air-to-air voice signals. It also interfaces with the launch umbilical 
for voice communications prior to and up to liftoff. 

During launch and reentry in the development flights, the 
flight crew members will be wearing ejection escape suits and will 
communicate with each other, and with the ground, through the 
helmets of their suits. When in orbit, they can, at their option, 
wear either the lightweight head set (LWHS) or a communica¬ 
tions carrier assembly (CCA) headset. Regardless of the headset 
they use, they will also use a headset interface unit and a 
1.21-meter (4-foot) crew communication umbilical (CCU). 

The headset interface unit (HIU) is 66 millimeters (2-1/2 
inches) by 127 millimeters (5 inches) and clips onto the belt of 
the flight suit. The unit has a volume control knob and a rocker- 
type switch with three positions. The transmit position allows 
access to intercom and external circuits. The intercom position 
allows access to intercom only. The center (springloaded) posi¬ 
tion is the off position. The volume control knob acts in series 
with other volume controls on audio terminal units. The top of 
the HIU connects to the headset and the bottom to the CCU 
which, in turn, is connected to a CCU jack. Thus, the crew 
member headsets are electrically connected to the audio distri¬ 
bution system. 

The audio terminal units (ATU’s) are control panels used by 
the crew members to select audio channel, volume, and mode of 














407 


Headset Interface Unit 




































Space Shuttle Spacecraft Systems 



voice communication such as “PTT” (push to talk), “VOX” 
(voice activated), or “Hot” (live microphone). Eight ATU’s are 
available for use by the flight crew members. Two are located on 
the flight deck display and control panel forward station, three 
are located at the aft flight deck control and display panel 
station, two are located in the mid deck of the crew 
compartment, and one is located in the mid deck airlock for use 
during extra-vehicular activity (EVA). 

Common to all ATU’s are channel power switches, channel 
volume control thumbwheels, mode select knob, VOX sensitivity 
knob, page switch, and power switch. The channel power 
switches select access to any of five available channels for 
transmission or reception. The five available channels are two air 
to ground, one air to air, and two intercom. The switch positions 
are “T/R” (transmit and receive), “Rev” (receive only), and off. 
The channel volume control thumbwheels provide volume 
control of the voice signal. The mode select knob allows selection 
of the “PTT/H ot,” “PTT/VOX,” and “VOX/VOX” method of 
transmission activation. The first set of initials indicates the 
method of external transmission activation, and the second set 
indicates the method of intercom activation. The VOX sensitivity 
knob controls the sensitivity of the microphones when operating 
by voice. The page switch enables a page to be transmitted to all 
other ATU’s. The power switch in the “Aud/Tone” position 
provides all ATU active functions, including the reception of C/W 
tone signals; the “Aud” position is the same except it prevents 
reception of C/W tone signals at that ATU and the off position 
shuts off power to the ATU. 

Features not common to all ATU’s are the control knob, 
TACAN, and master volume control. Four of the eight ATU’s 
have a two-position control knob that allows control of that 
ATU to be transferred to another ATU. Control of the 
commander’s ATU can be switched to the pilot’s ATU and vice 
versa Control of the mission specialist ATU can be switched to 


the payload specialist ATU, and control of the airlock ATU can 
be switched to the mid deck ATU’s. The commander and pilot 
only have ATU’s for reception of TACAN ground identification 
signals of the TACAN ground station call letters in morse code, 
repeated every 40 seconds. The TACAN is a polar coordinate 
type of system which provides distance and bearing information 
to the station selected. The system operates in a band of 
frequencies from 962 to 1213 MHz. The master volume control 
on five of the eight ATU’s (commander, pilot, operator station, 
airlock, and one mid deck) controls the volume of all incoming 
signals simultaneously and acts in series with other volume 
controls. Two of the ATU’s (operator station and one in the mid 
deck) have a speaker/microphone, speaker, and off control, 
which controls the operation of the speaker microphone units 
(SMU’s) located near the respective ATU’s. In the “Spkr/Mic” 
position, the SMU can be used as a speaker or microphone. In the 
“Spkr” position, the SMU operates as a speaker only. In the 
“off’ position, the SMU is inoperative except for C/W emergency 
signals. There are four master alarm pushbuttom light indicators 
in the crew compartment that will silence these emergency 
signals, two at the forward flight deck commander and pilot 
station, one at the aft flight deck station, and one on the mid 
deck. 

One of the speaker microphone units is located at the aft 
flight deck station near the operator station ATU; the other is 
located in the crew compartment mid deck near the ATU that 
controls it. The “Xmit” position allows transmission on intercom 
and external circuits. The “Icom” position allows transmission 
on intercom only, when the ATU power switch that controls the 
SMU is in the “Spkr/Mic” position. Keying the “Xmit” or 
“Icom” switch on the SMU overrides the speaker except for C/W 
emergency signals. Each SMU has a “Mic Level” indicator light 
that illuminates when the SMU circuit is activated. 

External transmissions are made through PTT activation if 
an RHC (rotation hand control) at the commander or pilot 
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station is activated. In this mode, “Hot Mic” is activated, and the 
intercom is continuously live from the selected station (ATU or 
SMU). HIU or SMU “Xmit” must be keyed to enable external 
transmissions. 

The audio control central unit located in the crew compart¬ 
ment mid deck forward avionics bay is the heart and most 
important component of the audio distribution system. All audio 
signals coming from or going to the ATU’s (air-to-ground, 
air-to-air, C/W, TACAN identification, and intercom) are 
channeled through the ACCU. It acts as a central switchboard to 
identify, switch, and distribute all incoming and outgoing audio 
signals. The ACCU interfaces with all eight ATU’s, the network 
signal processor, the UHF transceiver, the C/W, the three TACAN 
sets, and the launch umbilical. All of the audio signal circuits in 
the ’ ACCU are electronically duplicated to provide internal 
redundancy. The ACCU has redundant power sources. 

The audio center panel is located on the flight deck aft 
station near the mission specialist station. It provides operations 
recorder selection, electrical interface with the docking ring, 
payload bay, and attached payloads (not used on initial 
development flight), and UHF channel access selection. The two 
rotary knobs on the panel select various audio signals to be sent 
to the operation recorders via the NSP. Any two voice channels 
can be recorded at the same time. One knob selects the 
Channel 1 audio signal and the other knob selects the Channel 2 
audio signal to be recorded. The audio center panel controls the 
communications with the docking ring, payload bay, and 
attached payloads (Spacelab) with on-off toggle switches which 
electrically connect that particular area to the audio distribution 
system. The audio center panel has three toggle switches that 
provide access to transmission and reception of UHF signals. One 
switch is for air-to-air channels and one is for each of the two 
air-to-ground channels. Each switch has T/R (transmission/ 


reception) and off position. If all three switches are on the off 
position, UHF operations are not possible. 

The UHF control panel located in the forward flight deck 
station overhead commander panel controls the UHF com¬ 
munication link. The transmit frequency switch selects one of 
the two UHF frequencies, 296.8 MHz primary or 259.7 MHz 
secondary, for external transmission. The antenna switch selects 
the UHF antenna on the lower forward fuselage external skin of 
the orbiter or the airlock antenna located in the forward payload 
bay. The airlock antenna is used only for air-to-air communica¬ 
tions during EVA. The UHF antenna on the lower forward 
fuselage of the orbiter has a thermal protection covering. The 
squelch switch permits the UHF signal to be suppressed. A 
five-position rotary knob on the UHF control panel selects any 
of the following modes of UHF transmission: EVA— 
transmissions made on one frequency selected by “Xmit Freq” 
switch and reception is on the other frequency; Otf—removes all 
electrical power; Simplex—transmission and reception are both 
made on the frequency selected by the “Xmit Freq” switch; 
Simplex + G Rev-same as Simplex except that reception of the 
UHF guard (emergency) frequency (243.0 MHz) is also possible; 
G T/R-transmission and reception are both made on the UHF 
guard (emergency) frequency. When the rotary knob is in any 
position other than off, it activates power to the UHF channel 
access switches on the audio center panel and activates power to 
the UHF transceiver. All external UHF transmissions are sent to 
and received from the UHF transceiver via the ACCU. All three 
of the UHF frequencies (296.8 MHz, 259.7 MHz, and 
243.0 MHz) are pre-set in the UHF transmitter and cannot be 
altered by the flight crew. 

During EVA’s in later flights, the UHF system will be used 
during the orbital phase of the flight. The UHF system will be 
used for air-to-air voice communications with the flight crew 
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member who is outside the orbiter using the UHF antenna in the 
airlock. If there should be any need for EVA in the initial 
development flights, voice communications will be performed 
with the communications umbilical. 

TRACKING AND DATA RELAY SATELLITE SYSTEM. 
In later flights of the Space Shuttle, a TDRS system will be 
placed into operation. In this system, the TDRS satellites will 
relay data to and from the orbiter, unmanned earth-orbiting 
spacecraft, and the earth station at NASA’s White Sands (New 
Mexico) Test Facility. TDRS offers simultaneous data relay 
services for up to 32 user spacecraft in orbits up to approxi¬ 
mately 2693 nautical miles (3100 statute miles) through 85 to 
100 percent of each spacecraft’s orbit. Today’s earth stations 
provide only an average of 15 percent orbital tracking for each 
revolution as a result of line-of-sight acquisition and loss of signal 
line of sight to other ground stations in respect to the spacecraft. 
The TDRS satellite communications payload operates as a 
repeater, relaying signals to and from the earth station and user 
spacecraft. The TDRS incorporates three frequency bands, 
adding ,the high capacity K-band to the conventional S- and 
C-band. The TDRS, however, will require much stronger signals 
to travel the longer distances from the orbiter to the TDRS and 
ground. In the later flights, a Ku-band system installed in the 
orbiter payload bay will provide the stronger signals. 

The TDRS was awarded in December 1976 by NASA to 
Western Union Space Communications Inc., a subsidiary of the 
Western Union Corp. TRW’s Defense and Space Systems Group, 
Redondo Beach, California, is building the satellites and ground 
support equipment for Western Union Space Communications 
Inc. Electronic hardware is jointly supplied by Harris Electronics 
System Division, in Melbourne, Fla., and TRW, who also 
performs integration and test of the total earth station. TRW is 
also developing software for the overall system and will integrate 
this software with the earth station and the satellites. 


The TDRS system will consist of four specialized com¬ 
munications satellites in geosynchronous orbit and a ground 
terminal at White Sands, New Mexico. One of these satellites will 
be used by Western Union as a domestic communications satellite 
and one will be a spare. The remaining two will provide the 
NASA tracking, command, and data relay services. Two of the 
four satellites are stationed over the Atlantic Ocean and two are 
stationed over the Pacific ocean. All TDRS satellites will be 
placed into earth orbit from the Space Shuttle with an Inertial 
Upper Stage (IUS) now being developed for the USAF by Boeing 
Aerospace. The TDRS includes advanced redundancy and relia¬ 
bility features to meet a 10-year-service requirement. 

KU-BAND SYSTEM. The orbiter KU-band system operates 
in the Ku-band portion of the RF spectrum, which is 
15,250 MHz to 17,250 MHz. The Ku-band provides a much 
higher gain signal with a smaller antenna than the S-band system. 
The S-band system can be used to communicate via the TDRS, 
but the low-data-rate mode must be used because of limited 
power since the S-band does not have a high enough signal gain 
to handle the high data rate. With Ku-band system, the higher 
data rates can be used. 

One drawback of the Ku-band system is its narrow pencil 
beam, which makes it difficult for the antennas on the TDRS to 
lock on to the signal. The S-band system will be used to lock the 
antenna into position first because it has a larger beam width. 
Once the S-band signal has locked the antenna into position, the 
Ku-band signal will be turned on. 

The orbiter Ku-band system includes a rendezvous radar 
which will be used to skin-track satellites or payloads that are in 
orbit. This makes it easier for the orbiter to rendezvous with any 
satellite or payload in orbit. For large payloads that will be 
carried into orbit, one section at a time, the orbiter will 
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rendezvous with the payload that is already in orbit to add on 
the next section. 

The 914 millimeter (36-inch) diameter orbiter Ku-band 
antenna is stowed in the forward portion or the orbiter payload 
bay and will be deployed after the orbiter is in orbit and the 
payload bay doors are open. The Ku-band antenna is located on 
the right-hand side (looking forward). The capability of installing 
a Ku-band antenna on the left-hand side is available. If the 
Ku-band antenna cannot be stowed, provisions are incorporated 
to jettison it so that the payload bay doors can be closed. 

The Ku-band antenna is gimbaled, which permits it to 
acquire the TDRS for communications acquisition or radar 
search for other space hardware. The Ku-band system is first 


given the general location of the space hardware from the orbiter 
computers. The antenna then makes a spiral scan of the area to 
pinpoint the target. 

With communications acquisition, if the TDRS is not 
detected within the first eight degrees of spiral conical scan, the 
search is automatically expanded to 20 degrees. The entire TDRS 
search requires approximately three minutes. The scanning stops 
when an increase in the received signal is sensed. 

Radar search for space hardware may use a wider spiral 
scan, up to 60 degrees. Objects may be detected by reflecting the 
radar beam off the surface of a target (passive mode) or by using 
the radar to trigger a transponder beacon on the target (active 
mode). 

OPERATIONS SEQUENCE-Prelaunch. The crew, wearing 
ejection escape suits, will communicate by voice through the 
launch umbilical. Voice communications through the S-band and 
UHF systems are checked. 

All of the S-band and UHF uplinks and downlinks will be 
checked. 

Prior to launch, all of the recorders are powered on. 

Ascent. The flight crew, wearing ejection escape suits, 
communicate by voice via the S-band PM link to ground. 

The S-band PM and FM downlinks transmit data to the 
ground and the FM downlinks will have real-time engine data. 

All of the records operate in a continuous mode. 

Orbit. The flight crew members remove ejection escape suits 
and put on lightweight headsets, headset interface units, and 
communication umbilicals. 
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All of the S-band and communications links can be on at 
the same time when the orbiter is in contact with a ground 
tracking station. The FM downlink will be used for transmission 
of real-time video (TV) and operations recorder dump data. 

After recording 32 minutes of ascent data, the wideband 
ascent recorder will shut off automatically and not be used for 
the test or the flight. The PCM unit will be placed into a high or 
low sample rate mode of operation, and the wideband mission 
recorder will be shut off by the flight crew. The wideband 
mission recorder will remain off for most of the flight except 
when the flight crew will turn it on and back off again. The 
operations records will continue to operate under control by 
ground commands. They will be dumped whenever possible over 
each ground station via the FM system. 

Reentry and Landing. The flight crew again don the ejection 

escape suits. 

The UHF system will be used during approach and landing 
phase for air-to-ground voice communications with the landing 
site control tower and for air-to-air voice communications with 
the chase aircraft. 

The wideband mission recorder will be turned on by the 
crew before reentry to use up the remainder of its tape. The PCM 
unit will be put into continuous mode of operation by the flight 
crew, and the operations recorders will continue recording. After 
landing, all of the instrumentation recorder will be played back 
by hardline via the T-0 umbilical to retrieve the data. 


TELEVISION. The orbiter closed circuit television (CCTV) 
system includes both interior and exterior cameras. In this des¬ 
cription, the television (TV) system is limited to the discussion of 


' 




the crew cabin operations. The payload bay and remote man¬ 
ipulator system television is discussed in the payload deployment 
and retrieval section of this booklet. 

The TV system is used to document a wide variety of on- 
orbit activities and events inside the crew cabin. These activities 
and events include crew activities and operations, experiment 
observations, inspections and data retrieval, hardware observa¬ 
tions, and crew compartment areas and configurations. 

The system consists of TV camera, TV lens, TV wide angle 
lens, TV viewfinder monitor, TV cable 3 meter (10 feet) and 
6 meter (20 feet), TV viewfinder monitor cable, TV console 
monitor, video tape recorder, video tape recorder cassette, and 
TV system displays and controls. 

All TV operations involving uplink commands and data 
downlinks are restricted to S-band coverage prior to the avail¬ 
ability of the TDRSS (Tracking and Data Relay Satellite System). 
After the TDRSS is operational, Ku-band and S-band coverage 
will determine TV operations requiring uplink and downlink 
capabilities in the operational phase. 

During launch and entry, the TV system components are 
stowed in lockers, with the exception of the video tape recorder 
(VTR) and monitors 1 and 2 which are installed on panels LI2 
and A3, respectively. 

The crew is required to deploy, set up, and stow the TV 
system. Control of the system is available from the ground 
through uplink commands and onboard from panel A7 and the 
camera assembly. The ground and crew can control the system 
power, camera and lens functions, and input/output video con¬ 
figuration selection. Only the crew can determine control mode 
(ground and/or onboard) and assign the input to monitor’s 1 
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Television System 


and 2. The ground can affect the monitor 1 (2) display if a split 
screen display from a multiplexer is the input to the monitor. 
In this case, the ground can change the camera inputs assigned to 
the multiplexer. Also, the ground can simultaneously downlink 


a camera selected for monitor 1 (2) and adjust the camera 
settings (zoom, etc) and affect the monitor 1 (2) display. VTR 
record and playback operations are controlled only by the crew. 

All interior cameras are equipped with a color lens. Mon¬ 
itor 1 (2) and the TV viewfinder monitor provide a monochrome 
(black and white)output, regardless of the lens assembly utilized, 
that allows the crew to adjust and view the video scenes. When 
viewing interior camera scenes, a flicker will be noticed. The 
flicker is caused by the rotating color wheel used to generate the 
field-sequential-color signal that allows color outputs on the 
ground. The color conversion process on the ground eliminates 
the flicker before the color signal is distributed. 

The camera is a basic monochrome camera that converts 
light images into a composite video signal (picture plus sync) and 
can produce either a black and white or color image depending 
on the lens assembly used. 

The TV lens provided with the TV system is a color lens. 
The lens is an F/1.4 zoom lens. The lens is equipped with a 
six-segment three-color rotating filter wheel that produces 
sequential red, green, and blue color fields. The lens is equipped 
with motorized lens control functions for varying the zoom, 
iris, and focus. These lens functions are controlled manually via 
lens switches, remotely via panel A7, or via ground command. 

The viewfinder monitor is a small portable monochrome 
monitor which enables the crew to view camera video output for 
picture quality and scene verification when monitor’s 1 and 2 are 
not accessible or available. 

The TV cable provides an interface between the camera and 
the two TV system input stations located in the crew cabin at 
panels 019 and M058F, respectively. The cable provides the 
camera with 28 vdc power, camera/lens commands along with 
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the sync signal, and video including camera/lens data back to the 
control unit for distribution. 

The viewfinder monitor cable provides an interface between 
the camera and the monitor. The cable provides the monitor 
with 28 vdc power and camera video input. The cable is 2.74 
meters (9 feet) in length. 

The two TV console monitors fixed in the aft flight deck 
crew station on panel A3 are identical and are arranged one over 
the other. The top one is referred to as monitor 1 and the 
bottom as monitor 2. The monitors are used primarily to pro¬ 
vide the crew with a means of viewing payload bay/remote 
manipulator system camera outputs for picture quality, scene 
verification, and to conduct camera operations. These monitors 
can also be used to display cabin TV output when it is more con¬ 
venient than using the viewfinder monitor. Monitor 2 is also the 
source of video for the video tape recorder. Each monitor is 
a monochrome monitor and has the capability of displaying any 
of the camera inputs available and includes a split screen image 
from any two cameras. This feature is generated by the control 
unit and selected via panel A7 commands. The video source may 
be selected from the panel A7 selection, the downlink signal, and 
a direct video tape record video playback, monitor 2 only. The 
monitors are capable of displaying a set of crosshairs for camera 
pointing alignment and superimposing alphanumeric camera data 
on the screen. The data consists of a camera ID (identification) 
number, camera pan and tilt angles, and camera temperatures if 
any camera is in an overtemperature condition. The monitors are 
equipped with displays and controls to directly control most 
monitor operations; however, the assignment of an input source 
to the monitor is controlled by panel A7. 

The video tape recorder is a modified, off-the-shelf video 
recorder. The video tape recorder has the capability of also 
recording audio with the video through the crew communications 


umbilical connector on the video tape recorder housing. This 
connector only interfaces the video tape recorder and does not 
allow the crewman to access the vehicle communications system. 
The video tape recorder utilizes 30 minute tape cassettes which 
can be played back for downlink via a combination of crew and 
ground operation. Only recorded video, not audio, is down¬ 
linked. All actual video tape recorder operations must be per¬ 
formed by the crew including everything from tape changeout 
to video tape recorder activation. The video tape recorder is con¬ 
figured to receive its video input via monitor 2 (to record video 
on the video tape recorder, the desired camera output must be 
displayed on monitor 2 which is connected directly to the video 
tape recorder). For onboard playback, the recorded video can be 
reviewed on monitor 2 by positioning the monitor 2 source 
switch to DIRECT and initiating a playback mode. For down¬ 
link purposes, the video tape recorder is connected to the pay- 
load 1 (PL 1) input which is a panel A7 VIDEO INPUT choice - 
PL 1. The switch panel located above the video tape recorder 
includes a circuit breaker for the video tape recorder. 


Video tape recorder uses off-the-shelf 30 minute tape 
cassettes. The video tape recorder is equipped with a NO VIDEO 
light that illuminates when there is no video source present at the 
recorder. When recording, a check should be made to verify that 
the NO VIDEO light is off. There is also an end-of-tape (EOT) 
light that indicates when the cassette is out of tape. When this 
occurs, the video tape recorder will automatically stop. Tape 
changeout is just a matter of ejecting the cassette from the video 
tape recorder like any cassette recorder. 


Viewfinder monitor is 203 x 107 x 91 millimeters (8 x 4.25 
x 3o6G inches) and weighs 1.81 kilogram (4 pounds). TV console 
monitor is 317 x 254 x 177 millimeters (12.5 x 10 x 7 inches) 
and weighs 9.52 kilograms (21 pounds). 
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The contractors involved with the instrumentation and 
communication systems are Aydin, Vector Division, Newton, PA 
(wideband frequency division multiplexing); Communications 
Components, Costa Mesa, CA (UHF antenna); Conrac Corp., 
West Caldwell, NJ (mission timer event timer, ground command 
interface logic box, FM signal processor); Eldec Corp., Lynwood, 
WA (dedicated signal conditioner); Endevco, San Juan Capistrano, 
CA (piezoelectric accelerometer, acoustic pickup piezoelectric — 
acoustic and vibration); Gulton industries. Costa Mesa, CA 
(accelerometer linear flow frequency, vibration, acoustic); 
Harris Corp., Electronic Systems Division, Melbourne, FL (pulse 
code modulation master unit); Harris Corp., Electronic Systems 
Division, Baltimore, MD (payload data interleaver); Hughes, El 
Segundo, CA (Ku-band radar, communication system deployable 
antenna and electrical assembly); K-West, Westminster, CA 
(wideband signal conditioner, strain gauge signal conditioner); 
Magnavox, Ft. Wayne, IN (UHF receiver-transmitter mount, 
UHF receiver-transmitter); Micro Measurements, Romulus, MI 
(strain gauge); RDF Corp., Hudson, MH (sensors, transducers); 
Rosemount, Inc., Eden Prairie, MN (transducer, sensors); Radio 
Corp. of America, Astro-Electronics Division, Princeton, NJ 
(closed circuit television); Spectran, La Habra, CA (sensors); 
Sperry Rand Corp., Flight Systems Division, Phoenix, AZ 
(multiplexer/demultiplexer); Stratham Instruments, Oxnard, CA 
(transducers); Systron-Donner, Concord, CA (accelerometer); 
Teledynamics Division of Ambac Industries, Fort Washington, 
PA (S-band transmitter DFI, FM transmitter, S-band trans¬ 
ceiver); Telephonies Division, Instruments Systems Corp., 
Huntington, NY (orbiter audio distribution system); TRW Sys¬ 
tems, Electronic Systems Division, Redondo Beach, CA (S-band 
payload interrogator, S-band network equipment, network signal 
processor; payload signal processor); Transco Products, Venice, 
CA (S-band switch); Watkins Johnson, Palo Alto, CA (C-band 
radar altimeter antenna, L-band TACAN, S-band quad antenna, 
S-band hemiantenna, S-band payload antenna, S-band power 
amplifier); Wavecom, Northridge, CA (S-band multiplexer, DFI); 


Westinghouse Electric Corp., Systems Development Division, 
Baltimore, MD (master timing unit), AIL, Huntington, NY 
(S-band preamplifier assembly), AVCO, Wilmington, MA (Ku- 
band MSBLS antenna, Ku-band waveguide);Teledyne-Microwave, 
Mountain View, CA (S-band switch assembly); Teledyne- 
Electronics, Newberry Park, CA (S-band FM transmitter); RCA, 
Government Communications Systems, Camden, NJ (extra¬ 
vehicular activity communications system). 

NAVIGATION AIDS 

The navigation system used during entry consists of the 
inertial measurement units (IMU’s) and navigation aids: TACAN 
(tactical air navigation), MSBLS (microwave scan beam landing 
system), air data system, and radar altimeter. The three IMU’s 
maintain an inertial reference and provide velocity changes until 
MSBLS is acquired. Navigation-derived air data is needed during 
entry as inputs to the guidance, flight control and flight-crew- 
dedicated displays. Such data is collected from below Mach 3 
through landing. The navigation-derived data is used as a backup 
to TACAN, which supplies range and bearing measurements and 
is available beginning at an altitude of approximately 44,196 
meters (145,000 feet). TACAN is used until MSBLS acquisition 
or until landing if MSBLS is not available. 


AIR DATA SYSTEM. The air data system provides 
information on movement of the orbiter in the air mass (flight 
environment) during entry. There are two air data probe assem¬ 
blies, each consisting of a probe, an actuator, and dual drive 
motors. The probes are stowed during ascent, orbit, and the 
initial entry heat load environment. The probes are then 
deployed independently by the flight crew from the flight deck 
display and control panel when the orbiter’s velocity is below 
Mach 3. The probes are located on the lower left and lower right 
side of the forward fuselage nose area. 
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The air data system senses air pressures related to the 
spacecraft movement through the atmosphere for updating the 
navigation state vector in altitude, guidance in steering and 
speedbrake command calculations, flight control for control law 
computations and for display on the commander’s and pilot’s 
AMI’s (alpha Mach indicators) and the commander’s and pilot’s 
AVVI’s (altitude vertical velocity indicators). The AMI’s display 
essential flight parameters relative to the spacecraft travel in the 
air mass such as angle of attack (alpha), acceleration, Mach/ 
velocity, and knots equivalent airspeed. The AVVI’s display such 








essential flight parameters as radar altitude, barometric altitude, 
altitude rate, and altitude acceleration. Prior to deployment of 
the air data system probe, the AVVI’s would receive their inputs 
from the navigation attitude processor. The AMI’s would receive 
their inputs from the navigation attitude processor and IMU’s 
prior to air data system probe deployment. The AMI accelera¬ 
tion indicator remains on the navigation attitude processor from 
the IMU’s, as does the AVVI’s altitude acceleration indicator. 
The AVVI radar altitude receive their information from the radar 
altimeters when the spacecraft is down to 5000 feet in altitude. 


Each probe is independently deployed by an actuator con¬ 
sisting of two motors connected by a differential and appropriate 
gearing and limit switches. The flight crew controls the deploy¬ 
ment from switches on the flight deck display and control panel. 
The motors, through mechanical gear reductions drives the probe 
to the deployed position. When the probe is fully deployed, 
limit switches in the probe assembly remove power from the 
electrical motors. If deicing of the probe is required, heaters can 
be turned on. Deployment time is 15 seconds for two-motor 
operation and 30 seconds for single-motor operation. The probe 
mechanism (except for the probe itself) has thermal protection 
covering in the stowed position. In the deployed position, 
mechanical fittings match the orbiter mold line. 


Each probe senses four pressures (static pressure, total 
pressure, angle of attack upper pressure, and angle of attack 
lower pressure) as well as two total temperature (T^) resistances. 
The four pressures are sensed at ports on each probe: static 
pressure at the side, total pressure at the front, and angle of 
attack lower near the bottom front. The probe-sensed pressures 
and temperatures are sent to the ADTA’s (air data transducer 
assemblies). 
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Air Data Probe Details 

The left probe-sensed pressures are connected by pneumatic 
tubing to ADTA’s 1 and 3. Those sensed by the right probe are 
connected by pneumatic tubing to ADTA’s 2 and 4. Tempera¬ 
tures and sensed pressure from the probes are sent to the same 
ADTA’s. 

Within each ADTA, the pressure signals are directed to four 
transducers and the temperature signal to a bridge. The pressure 
transducer analogs are converted to digital data by counters con¬ 
trolled by the digital processor. The temperature signal is con¬ 
verted by an analog/digital (A/D) converter. The digital processor 
corrects errors and linearizes the pressure data and converts the 
temperature bridge data to temperatures in degrees centigrade. 
This data is sent to the digital output device, which converts the 
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signals into serial digital format, and then to the onboard com¬ 
puters for updating the navigation state vector. The data also 
is sent to the commander and pilot AVVI’s (altitude/vertical 
velocity indicators), AMI’s (alpha/Mach indicator), and CRT 
(cathode ray tube). 

The four computers compare the pressure readings from the 
four ADTA’s for error. If all the pressure readings compare 
within a specified value, one set of pressure readings from each 
probe is summed and averaged and sent to the software. If one 


or more pressure signals of a set of probe pressure readings fail, 
the failed set data flow from that ADTA to the averager is 
stopped and the software will receive data from the other ADTA 
of that probe. If both sets from a probe fail, the software oper¬ 
ates on data from the two ADTA’s connected to the other probe. 
The best total temperature from all four ADTA’s is sent to the 
software. A fault detection would illuminate the “Air Data” red 
caution/warning light, backup C/W alarm light, and master alarm 
light and sound the audible tone and a fault message on the 
CRT. A communication fault will illuminate the “SM Alert”. 
Prior to the air data probe deployment, the commander and pilot 
AVVI’s and AMI’s receive information from the navigation 
attitude processor. 

The commander and pilot AVVI’s and AMI’s receive inertial 
information from the navigation attitude processor when their 
“Air Data” switches are in the “Navigation” position. When the 
air data probes are deployed, the commander and pilot can 
position their “Air Data” switches to the left or right air data 
probe for display. 

The AVVI’s display altitude acceleration (“Alt Accel”), 
altitude rate (“Alt Rate”), altitude (“Alt”), and radar altitude 
(“Rdr Alt”) information and the AMI’s display angle of attack 
(“Alpha”), acceleration (“Accel”), Mach/velocity (“M/Vel”), and 
equivalent airspeed (“EAS”). 

All but the alpha indicators (a moving drum) and the 
altitude acceleration indicators (a moving pointer displayed 
against a fixed line) are moving tapes behind fixed lines. The 
angle of attack indicator reads from -18 to +60 degrees, the 
acceleration indicator from -50 to +100 fps^ (feet per second- 
squared), the Mach/velocity indicator from Mach 0 to 4 and 
4,000 to 27,000 fps; equivalent airspeed from 0 to 500 knots, 
altitude acceleration from -13.3 to +13.3 fps^, altitude rate from 
-740 to +740 fps, altitude from -1000 to 450,000 feet, then 
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changes scale to +40 to +165 nautical miles (barometric altitude), 
and radar altitude from 0 to 5000 feet. 

Failure warning flags are provided for all four scales on the 
AVVI’s and AMI’s. The flags appear in the event of a malfunc¬ 
tion in the indicator or in received data. In the event of power 
failure, all four flags appear. 

The four ADTA’s are located in the orbiter crew compart¬ 
ment mid-deck forward avionics bays and are convection cooled. 
Each is 123.6 millimeters (4.87 inches) high, 539.7 millimeters 
(21.25 inches) long, 110.9 millimeters (4.37 inches) wide, and 
weighs 8 kilograms (19.2 pounds). 

TACAN (TACTICAL AIR NAVIGATION). TACAN pro¬ 
vides orbiter position with respect to a ground-based TACAN 
station. The orbiter is equipped with three TACAN sets which 
operate in a redundant set mode. Each TACAN set has two 
antennas, one on the orbiter lower forward fuselage and one on 
the orbiter upper forward fuselage. The TACAN’s are the air¬ 
borne portion of the global navigation system for military and 
civil aircraft operating at L-band (1-gigahertz) frequencies. The 
TACAN sets are used as an external navigation aid in the orbiter 
during the entry phase and RTLS (return-to-launch-site) abort. 

The ground-based portion of the TACAN is a part of the 
global navigation network. Normally several ground stations 
will be used during entry after leaving L-band communications 
blackout and during the terminal area energy management 
(TAEM) phases. Each ground station has an assigned frequency 
(L band) and a three-letter Morse code identification to the 
orbiter audio system for the commander and pilot. The ground 
station transmits on one of 252 (126X and 126Y) pre-selected 
frequencies (channels) which correspond to the frequencies the 
onboard TACAN sets are capable of receiving. These frequencies 
are spaced at 63-megahertz intervals. 


The ground beacon of the selected TACAN station con¬ 
stantly transmits a signal from which the onboard TACAN 
receiver units are capable of receiving through its antennas. 
Every 37.5 seconds (±2.5), the selected TACAN ground station 
transmits a coded three-letter Morse code identification as part of 
the transmission. When the onboard TACAN discerns this code, 
it separates it from the range and bearing data and produces a 
signal which is used by the orbiter audio system to produce an 
audible signal allowing the commander and pilot to confirm 
TACAN lock-on and station selection. 


Each onboard TACAN is controlled by a rotary switch on 
the flight deck display and control panel. Switch settings are 
“Off”, “RCV” (receive), “T/R” (transmit/receive), and “GPC” 
(computer mode). 


The onboard TACAN antennas are controlled by a 
“TACAN Antenna” switch. In “Auto,” the computers control 
antenna selection automatically. Upper and lower antennas can 
be selected manually by the flight crew on the flight deck display 
and control panel. 


In the GPC mode, the onboard computers control TACAN 
channel selection automatically. Ten TACAN ground stations 
are programmed into the software, divided into three geometric 
regions: the acquisition region (three stations), the navigation 
region (six stations), and the landing site region (one station). 


During orbital operations, landing sites are grouped into 
“mini-table” and “maxi-table” programs. The maxi-table pro¬ 
vides data sets that will support a broad range of trajectories for 





Space Shuttle Spacecraft Systems 







L-Band Upper No. 1 L-Band Lower No. 1 


TACAN 
No. 1 


3 =£ 


Detected 


ID Tone 


Solid-State 
Antenna Switch 
Coupler De¬ 
tector Filter 




Interr 



Self- 

Test | 

Video I 
r AGC^ 


1 

r 

Receiver 




Multiplexer/ 

Demultiplexer 

FF1 



MOM M 

•cv .im " 

i 

•1 Hi | 

omn I 


H 


07 






General- 

Purpose 

Computer 


5 

f 

Digital Data Unit 

] 





Digital 

Electronics 

Unit 







425 


TACAN R eceiver- Transmitter 














































































































Space Shuttle Spacecraft Systems 



contingency deorbits and enables reselection of runway and navi¬ 
gation and data sets for those deorbits. The mini-table consists 
of three runways determined by the flight crew with one initial¬ 
ized as a primary runway. The mini-table is transferred from 
entry operations and becomes unchangeable. Entry guidance 
is targeted from one of the three runways as selected by the 
crew, initialized with the primary runway for the well-defined 
trajectory and nominal end of mission data sets. Since the 
TACAN units are placed in groups of ten and ten TACAN units 
from one group (primary) form the TACAN half of the mini¬ 
table, the secondary and alternate runways should be from the 
same group as the primary runway to assure TACAN coverage. 
The runways with MSBLS are acquired and operation is auto¬ 
matic, with the flight crew provided with necessary controls and 
displays to evaluate MSBLS performance and take over manually 
if required. The runways with MSBLS must be in the primary or 
secondary slot in the mini-table for the mini-table to copy the 
MSBLS data. The maxi-table is an I-loaded table of 18 runways 
data sets and MSBLS data for runways and 50 TACAN data sets. 
In orbital operations, the landing site function provides the 
capability to transfer data from the maxi-table to the mini-table. 

The acquisition region is the area in which the onboard 
TACAN sets automatically start searching for a range lock-on of 
one of three ground stations, at approximately 44,196 meters 
(145,000 feet). After one TACAN acquires a range lock, the 
other two will lock on to the same ground station. If TACAN 
has not updated navigation at 42,672 meters (140,000 feet) alti¬ 
tude, the right-most event sequence green light on the flight deck 
display and control eyebrow panel will flash for five seconds and 
remain on. When at least two TACAN sets lock on, TACAN 
range and bearing are used by navigation to update state vector 
until MSBLS selection and acquisition. 

When the distance to the landing site is approximately 120 
nautical miles (138 statute miles), the TACAN begins the naviga¬ 


tion region of interrogating the six navigation stations. As the 
spacecraft progresses, the distance to the remaining stations is 
computed and the next nearest station is selected automatically 
when the spacecraft is closer to it than to the previous locked-on 
station. Only one station is interrogated when the distance to the 
landing site is less than approximately 20 nautical miles (23 
statute miles). Again, the TACAN sets will automatically switch 
from the last locked-on navigation region station to begin search¬ 
ing for the landing site station. TACAN azimuth and range are 
provided on the CRT horizontal situation display. TACAN range 
and bearing cannot be used to produce a good estimate of the 
altitude position component, so navigation uses barometric 
altitude derived from the air data system probes, which are 
deployed by the flight crew at approximately Mach 3. 


The onboard TACAN sets detect the phase angle between 
magnetic north and the position of the spacecraft with respect to 
the ground TACAN beacon to determine bearing. Periodically 
the onboard TACAN sets will emit an interrogation pulse which 
causes the selected TACAN ground station to respond with 
distance measuring equipment pulses. The slant range (orbiter to 
ground station) is computed by the onboard TACAN sets by 
measuring the elapsed time from interrogation to valid reply and 
subtracts known system delays. When approaching a ground 
TACAN station, the range will decrease. After the course has 
been selected, the onboard TACAN sets derive course deviation 
data. 


The range and bearing data are used in the entry phase by 
navigation to update the state vector position components, area 
navigation for display on the flight deck display and control 
panel HSI’s (horizontal situation indicators) after the data is 
transformed during TACAN operation, and for display of raw 
TACAN data on the CRT. 
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• TACAN station transmits RF burst when beam 
points to true north 


• Aircraft receiver times interval from burst 
to beam impingement and derives bearing 


TACAN Operation 


TACAN redundancy management consists of processing and 
mid-value selecting range and bearing data. The three TACAN 
sets are compared to determine if a significant difference is 
detected. When all three TACAN sets are good, redundancy 
management selects middle values of range and bearing. If one of 
the two parameters is out of tolerance, the remaining two will 
average that parameter. If a fault is verified, the “SM Alert” light 
is illuminated and a CRT fault message occurs for the applicable 
TACAN set. 

Each TACAN set can be controlled manually by the flight 
crew on the flight deck display and control panel by its rotary 
switch and four thumbwheels. The thumbwheels are used to 
select the TACAN station for reception of bearing data when the 
rotary switch is on “Rev” (receive). The “T/R” position allows 
both bearing and range data, with the thumbwheels used to select 
the station. 

Since the TACAN does not provide altitude data, this is 
furnished by the onboard barometric altimeter to the onboard 
navigation. 


The three TACAN sets are located in the orbiter crew com¬ 
partment mid-deck avionics bays and are convection cooled. 
Each set is 193.5 millimeters (7.62 inches) in height, 193.5 
millimeters (7.62 inches) in width, 318 millimeters (12.53 
inches) in length, and weighs 13 kilograms (30 pounds). 


HORIZONTAL SITUATION INDICATOR. Horizontal 
situation indicators (HSI) are located on the flight deck display 
and control panel at the commander and pilot stations. Each HSI 
displays a pictorial view of the spacecraft’s location with respect 
to various navigation points during entry through rollout and 
during RTLS (return-to-launch-site) abort. 
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Three switches are associated with each HSI. One switch 
selects the mode (“Entry,” “TAEM,” or “Approach”) and the 
other two select the source of data (“Nav,” “TACAN, or 
“MLS” from source 1,2, or 3). When in the “Nav” position, that 
HSI is supplied with data derived from navigation attitude proc¬ 
essor. When in “TACAN,” the HSI is supplied with data derived 
from TACAN 1, 2, or 3. When in “MLS,” the HSI is supplied 
with data derived from MSBLS 1, 2, or 3. 

Each HSI displays magnetic heading, runway magnetic 
course, course deviation, glide slope deviation, primary and 
secondary bearing, primary and secondary distance, and flags to 
indicate validity. 

The magnetic heading (the angle between magnetic north 
and vehicle direction measured clockwise from magnetic north) is 
displayed by the compass card and can be read under the lubber 
line located at the top of the indicator dial. (A lubber line is a 
fixed line on a compass aligned to the longitudinal axis of the 
craft.) The compass card is positioned at zero degrees (N-north) 
when the heading input is zero. When the heading point is 
increased, the compass card rotates counterclockwise. 

The course pointer points to the landing runway magnetic 
heading and rotates around the inside edge of the compass card. 
The scale reading on the compass card at the tip of the course 
pointer is the selected course. When the course input is set at 
zero (N), the course pointer is positioned at the lubber line 
regardless of the position of the compass card. The course 
pointer is driven relative to the HSI case and not relative to the 
HSI compass card. The software subtracts the vehicle’s magnetic 
heading from the course and this difference is represented by 
digital input to the HSI, when the digital input is increased, the 
course pointer rotates clockwise. There is no reversal of the 
pointer movement when it passes through 360 degrees. 


The course deviation bar is zeroed when in “Entry” and 
indicates the displacement of the vehicle to the right or left of 
the extended runway centerline plus or minus 10 degrees when 
in TAEM and plus or minus 2.5 degrees when in Approach and 
Landing. When the source deviation input is zero, the deviation 
bar is aligned with the ends of the course pointer. An orbiter 
deviation off course to the left causes the deviation bar to de¬ 
flect to the right (command to fly right). 

The glide slope indicator shows deviation above or below 
the average TAEM glide path to Waypoint 1 (WP 1) for the 
nominal entry point (NEP) at the primary runway. In Entry, the 
glide slope pointer is stowed, and the flag is displayed. The 
indication is plus or minus 5,000 feet (1,524 meters) when in 
TAEM, and plus or minus 1,000 feet (304 meters) when in 
Approach and Landing. A deviation of the orbiter above the 
glide slope causes the pointer to deflect downward (to command 
fly down). 

When in Entry, the primary bearing pointer (P) indicates the 
spherical bearing to WP 1 for the NEP at the primary landing 
runway and the secondary bearing pointer (S) indicates the 
spherical bearing to WP 1 for NEP at the secondary landing 
runway. When in TAEM, the primary bearing pointer indicates 
bearing to WP 1 on the selected heading alignment cylinder for 
NEP at the primary runway and the secondary bearing pointer 
indicates the bearing to the center of the selected heading 
alignment cylinder primary landing runway. When in Approach 
and Landing, both primary and secondary bearing pointers show 
the bearing to WP 2 at the primary runway. The pointers show 
bearings relative to the compass card when the card is positioned 
in accordance with the heading input data. When the bearing 
inputs are set to zero, the corresponding bearing pointer is 
positioned at the lubber line regardless of the position of the 
compass card. When the bearing inputs are increased, the 
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corresponding bearing pointers rotate clockwise with respect to 
the compass card. The software subtracts the vehicle heading 
from these two bearings to assure appropriate indications. There 
is no reversal of the pointer movement when it passes through 
the 360 degrees in either direction. 

When Entry is selected, the primary range indicator (“Pri 
Miles”) shows the spherical range to WP 2 on the primary runway 
via WP 1 for NEP. The secondary range (“sec miles”) indicator 
shows spherical range to WP 2 on the secondary runway via WP 1 
for NEP. 

When in TAEM, the primary range is the horizontal distance 
to WP 2 on the primary runway via WP 1 for NEP and the 
secondary range is the horizontal distance to the center of the 
selected heading alignment cylinder for the primary runway. 
When in Approach and Landing, both primary and secondary 
range indicators show horizontal distance to WP 2 on the primary 
runway. The range displays are on the magnetic wheels in the 
upper right and left corners of the HSI face. Each display ranges 
from 0 to 3999 nautical miles. Both indicators use the same 
range data. 

The bearing (“Brg”) flag indicates that the heading, primary 
or secondary bearing, is invalid; the “Cl” flag indicates that the 
course deviation display is invalid; and the glide slope (“GS”) flag 
indicates that the glide slope deviation display is invalid. 

Red and white diagonally striped flags are used to obscure 
the range indicators whenever their displays are invalid. An “Off” 
flag indicates that power is off or less than 18 volts. 

MICROWAVE SCAN BEAM LANDING SYSTEM. The 
MSBLS or MLS (microwave landing system) is an airborne 
Ku-band receiver-transmitter landing and navigation aid with 
decoding and computational capabilities. MSBLS provides 




orbiter position with respect to ground-based equipment placed 
near the runway. When the channel (specific frequency) associ¬ 
ated with the targeted runway approach is selected, the airborne 
portion of the MSBLS receives elevation, azimuth, and range 
data from the ground station. MSBLS is used during TAEM and 
approach and landing phases of the flight and return-to-launch- 
site (RTLS) abort. 

The orbiter is equipped with three independent MSBLS sets. 
Each consists of a Ku-band antenna RF assembly and a decoder 
assembly. Each Ku-band receiver-transmitter with its decoder and 
data computation capabilities determines the elevation angle, 
azimuth angle, and range of the orbiter with respect to the 
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Decoder-Receiver 



MSBLS ground station. The MSBLS provides highly accurate 
three-dimensional position information to the orbiter to compute 
steering commands which maintain the orbiter on its proper 
flight trajectory. The three Ku-band antennas on the orbiter are 
located on the upper forward fuselage nose area. The MSBLS and 
decoder assembly are located in the crew compartment mid-deck 
avionics bays and are convection cooled. 

The ground portion of the MSBLS consists of two shelters: 
an elevation shelter and an azimuth/DME (distance measuring 


equipment) shelter. The elevation shelter is located near the 
projected touchdown point and the azimuth/DME shelter near 
the far end of the runway. Both ends of the runway are instru¬ 
mented to enable landing in either direction. 

The MSBLS ground station signals are acquired when the 
orbiter is close to the landing site and has turned on its final leg. 
This usually occurs on or near the heading alignment cylinder 
about 8 to 12 nautical miles (9 to 13 statute miles) from touch¬ 
down and at an altitude of approximately 5486 meters (18,000 
feet). 


Final tracking occurs at the TAEM-“Autoland” interface at 
approximately 3048 meters (10,000 feet) altitude and eight 
nautical miles (9 statute miles) from the azimuth/DME station. 

The MSBLS angle and range data are used to compute 
steering commands until the orbiter is over the runway approach 
threshold, at approximately 30-meter (100-foot) altitude. The 
autoland system may be overridden by the commander or pilot. 

The HSI’s show deviations from the selected glide slope and 
azimuth. When the orbiter is over the runway threshold, the 
radar altimeter is used to provide elevation (pitch) guidance. 
Azimuth/DME data is used during the landing rollout. 

The three orbiter MSBLS sets operate on a common channel 
during the landing phase. The orbiter Ku-band antennas for each 
MSBLS are used for reception of angle data and transmission or 
reception of range data on a time-shared basis. 

Each RF assembly routes the range, azimuth, and elevation 
information in RF form to its decoder assembly, which processes 
the information and converts it to digital words for transmission 
to the onboard computers via the MDM’s for guidance and 
navigation. 
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Ele\'aiion Shelter and Equipment 


Elevation, azimuth, and range data from the MSBLS are 
used by the GN&C system from acquisition until the runway 
approach threshold is reached. After that point, the azimuth and 
range data are used to control rollout. Altitude data is provided 
separately by the orbiter radar altimeter. 
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Azimuth 'Distance Measuring Equipment Shelter and Equipment 


Each MSBLS RF assembly transmits and receives precision 
slant range pulses. Range for DME is determined by measuring 
the time between the orbiter interrogation and the ground 
station reply. 
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Information on azimuth angle relative to the runway center- 
line is transmitted to the orbiter through a very narrow RF beam 
scanned 15 degrees to the right and left of the runway. This 
beam is modulated with many pulse pairs whose spacing varies 
with beam position as the beam scans the orbiter. An averaging 
operation is required to determine the center value. The orbiter 
can determine runway azimuth by measuring the received pulse 
pair spacing. 



Absolute elevation angle referenced to horizontal informa¬ 
tion is received in the same manner as the azimuth, except the 
beam is scanned in a vertical direction, 3 degrees below and 
27 degrees above the runway plane. 

In addition, the position of the orbiter with respect to the 
runway is displayed on the HSI’s. Elevation and azimuth are 
shown relative to a computer-derived glide slope on glide slope 
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indicator and course deviation indicator needles. The range is 
displayed on the mileage indicators. 

Since the azimuth/DME shelters are at the far ends of the 
runway, MSBLS can provide useful data until the orbiter is 
stopped. Azimuth data gives position in relation to the runway 
centerline and the DME gives distance from the orbiter to end of 
runway. 

Each MSBLS set has channel select thumbwheels on the 
flight deck display and control panel which allow the flight crew 
to manually select the channel for the ground station at the 
selected runway. 

Redundancy management mid value selects azimuth and 
elevation angles for processing of Nav data. The three MSBLS 
sets are compared to determine if a significant difference is 
detected in one against the other. 

When data from all three MSBLS sets are valid, redundancy 
management selects middle values of three ranges, azimuths, and 
three elevations. With two good MSBLS sets, the two ranges, 
azimuth, and elevation are averaged. With only one good MSBLS 
set, its range, azimuth, and elevation are passed for display. When 
a fault is detected the “SM Alert” light is illuminated, and a CRT 
fault message shown. 

Each MSBLS decoder assembly is 209 millimeters (8.25 
inches) in height, 127 millimeters (5 inches) in width, 410 
millimeters (16.158 inches) in length, and weighs 7.9 'kilograms 
(17.5 pounds). The RF assembly is 177.8 millimeters (7 inches) 
in height, 889 millimeters (3.50 inches) in width, 260 millimeters 
(10.25 inches) in length, and weighs 2.72 kilograms (6 pounds). 

RADAR ALTIMETER. The radar altimeter provides the 
orbiter altitude above the ground. The radar altimeter is a low- 


altitude terrain tracking and altitude-sensing system. It is based 
on the precise measurement of time required for an electromag¬ 
netic energy pulse to travel from the orbiter to the nearest object 
on the ground below and return during altitude rate changes up 
to 609 meters per second (2000 fps). This enables tracking of 
mountain or cliff sides ahead or adjacent to the orbiter if these 
obstacles are nearer than the ground below, and provides warning 
of rapid changes in absolute altitude. 

The radar altimeter is the primary sensor of the “Autoland” 
system and for touchdown guidance after the orbiter has crossed 
the runway threshold from an altitude of 30 meters (100 feet) 
down to touchdown. Before that point, radar altimeter data is 
displayed on the crew’s AVVI’s (altitude/vertical velocity indi¬ 
cators) up to 5000 feet. 
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The orbiter contains two independent radar altimeter 
systems, each with a transmitting and receiving antenna. The 
systems are independent and can operate simultaneously without 
affecting each other. The fou C-band antennas are located on 
the lower forward fuselage. The two receiver/transmitters are 
located in the mid-deck forward avionics bays and are convection 
cooled. 

Altitude range signals are analog voltages proportional to 
the elapsed time required for return of the ground pulse, which is 
a function of height or distance to the nearest terrain. The 
onboard computers process the data for automatic flight control 
of orbiter altitude if in the autoland mode; otherwise, the data is 
used only for display on the AVVI’s. 

Since there are only two radar altimeters aboard the orbiter, 
the altitude data from the two units are averaged in the 
redundancy management for use in the autoland mode. The 
MSBLS elevation and range information then can be used down 
to 30 meters (100 feet). 

Both commander and pilot stations have switches for 
selecting radar altimeter 1 or 2 for display on his AVVI. The 
display scale ranges from 0 to 5000 feet and the altitude is 
displayed on moving tapes. Above 5000 feet, the scale will be 
pegged. Below 5000 feet, the indicator will show actual altitude, 
orbiter to ground. At 1500 feet the RA indicator changes scale. 
The “RA Off” flag will appear if there is a loss of power, loss of 
lock, data good-bad, or after three communication faults. 

Each radar altimeter receiver-transmitter is 79 millimeters 
(3.13 inches) in height, 188.2 millimeter (7.41 inches) in length, 
97 millimeters (3.83 inches) in width, and weighs 2 kilograms 
(4.5 pounds). 


The contractors involved are: Eaton Corp., AIL Division, 
Farmingdale, NY (MSBLS); AiResearch Manufacturing Co., 
Garrett Corp., Torrance, CA (air data transducer assemblies); 
Hoffman Electronics Corp., Navigation Communication System 
Division, El Monte, CA (TACAN); Honeywell Inc., Minneapolis, 
MN (radar altimeter); Rosemount Inc., Eden Prairie, MN (air data 
sensor probes). 

GUIDANCE, NAVIGATION, AND CONTROL 

The guidance, navigation, and control (GN&C) system 
responds to software commands to provide vehicle control and 
also furnishes sensor and controller data to the GN&C software 
so that it can compute the commands. 

The orbiter’s five flight computers are organized into a 
redundant set of four which form the primary flight system, with 
the fifth computer used as the backup flight system in the initial 
development flight tests. The fifth computer operates independ¬ 
ently of the other four. 

These computers interface with various systems. The 
orbiter’s flight forward and flight aft multiplexer/demultiplexers 
(MDM’s) and data bus serve as the conduit for signals going to 
and from such units as the master timing unit, the sensors that 
provide velocity and attitude information, orbiter propulsion 
systems, aerodynamic surfaces, and displays and controls. 

The GN&C system consists of two modes of operation: auto 
and manual (control stick steering). In the automatic mode, the 
primary flight system (PFS) essentially allows the computers to 
do all the flying, with the flight crew selecting the various 
operational sequences. The crew may control the vehicle in the 
control stick steering mode by using hand controls such as the 


) 


J 


440 






Space Shuttle Spacecraft Systems 



rotation hand control (RHC), translation hand control (THC), 
speedbrake/thrust controller (SBTC), and rudder pedals; however, 
the commands issued by the crew must pass through and be 
issued by the computers. 

There are no direct mechanical linkages by which the flight 
crew can manipulate the various propulsion systems or aero¬ 
dynamic aerosurfaces; thus, the orbiter is an entirely digitally 
controlled, fly-by-wire vehicle. 

The multi-function cathode ray tube (CRT) display system 
presents GN&C and system status information to the flight crew 
and allows the crew extensive interaction with the computers via 
keyboard units on the flight deck display and control panel. 

The mass memory units contain the primary and backup 
flight software to be loaded into the computers and com¬ 
municate directly with the computers. 

The computers also transmit pulse code modulation (PCM) 
telemetry data to the ground stations for monitoring of the 
internal state of the computer’s status and operational informa¬ 
tion of all subsystems and to report progress of the flight. 

The ground launch processing system (LPS) interfaces with 
the orbiter before launch via the launch umbilical, which 
provides direct access to the onboard computer’s memory. In 
addition to performing vital ground launch sequencing tasks, the 
LPS, using a general memory read/write capability, can monitor 
and modify the onboard computer core (such as updating launch 
pad initial conditions). 

The navigation system maintains an accurate estimate of the 
vehicle position and velocity, referred to as a state vector. From 
position and velocity, other parameters (acceleration, angle of 
attack) are calculated for use in guidance and for display to the 


crew. The current state vector is mathematically determined by 
integrating the equation of motion for coasting flight and by 
using the acceleration of the vehicle as sensed by the inertial 
measurement units (IMU’s) for powered flight. The alignment of 
the IMU, and hence the accuracy of the resulting state vector, 
deteriorate as a function of time. Celestial navigation instruments 
(the star trackers and crew optical alignment sight) are used to 
keep the IMU’s aligned while in orbit. The accuracy of the IMU- 
derived state vector is, however, insufficient for either guidance 
or the flight crew to bring the spacecraft to a pinpoint landing. 
So, data from other navigation sensors — air data system, 
TACAN, microwave scan beam landing system (MSBLS), and 
radar altimeter — is blended into the state vector at different 
phases of entry to provide the necessary accuracy. 

The guidance system computes and issues the propulsion 
system engine fire and gimbal commands (thrust vector control — 
TVC) for the main propulsion system engines, solid rocket 
boosters, and orbital maneuvering system (OMS) engines, the fire 
commands for the reaction control system (RCS) engines, and 
the orbiter aerodynamic surface deflection commands. 

Flight control includes attitude processing and a digital 
autopilot which provides steering, thrust vector, attitude, and 
aerosurface control. Flight control receives commands from 
guidance software (automatic) or from the flight crew via hand 
controllers (manual), which are in terms of vehicle dynamics 
(attitudes, rates, and accelerations) and processes them into 
commands for hardware (engine fire, engine gimbal, or aero¬ 
surface deflection). Flight control output commands are based 
on errors for stability augmentation. The errors are the difference 
between the commanded attitude, aerodynamic aerosurface 
position, body rate, or body acceleration and the actual attitude, 
position, rate, or acceleration. Actual attitude is derived from 
IMU angles, aerodynamic aerosurface position is provided by 
actuator feedback transducers through the aerosurface amplifiers 
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Navigation Interfaces 


(ASA’s); body rates are sensed by the rate gyro assemblies 
(RGA’s); and accelerations are sensed by the accelerometer 
assemblies (AA’s). During atmospheric flight, flight control 
adjusts control sensitivity based on air data parameters derived 
from local pressure sensed by the air data system probes and 
performs body turn coordination using body attitude angles 
derived from IMU angles. Thus, the GN&C hardware required to 
support flight controls is a function of the mission phase. 


Steering commands used by the flight control software are 
augmented by the guidance software or manually commanded 
using the hand controller or speedbrake/thrust controller. When 
flight control software uses the steering commands computed by 
guidance software, it is termed automatic guidance; when the 
flight crew is controlling the vehicle via the hand controllers it is 
called control stick steering (CSS). The commands computed by 
guidance are those required to get from the current state 
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GN&C Structure 


(position and velocity) to a desired state (specified by target 
conditions, attitude, airspeed, runway centerline). The steering 
commands take the form of translational and rotational rates and 
accelerations. Guidance receives the current state from navigation 
software. The desired state or targets are part of the initialized 
software load and can be changed in flight. 


Flight control software controls the vehicle via the selection 
of operational sequences/major modes (OPS/MM) in the onboard 


computers; this is accomplished via the keyboards at the flight 
deck commander and pilot stations. There is an operational 
sequence/major mode for prelaunch, first-stage ascent, second- 
stage ascent, orbit insertion OMS-1, orbit insertion OMS-2, orbit 
coast, maneuver execute, orbit checkout, deorbit maneuver, 
deorbit maneuver coast, entry guidance, and TAEM (terminal 
area energy management) guidance. In addition, the flight 
control system consists of two selectable modes — Auto and 
CSS — via pushbutton light indicators on the flight deck at the 
commander and pilot stations. 
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Flight Control System 


The flight control system two selectable modes are 
organized into two control channels: pitch and roll/yaw. The 
pushbutton will illuminate a white light to indicate the mode 
selected. Each pushbutton is a triple redundant, momentary 
contact, nonlatching switch. 


In the Auto mode, the GN&C provides automatic control of 
the vehicle through selection of the operational sequence major 
mode via the onboard keyboard, thus the flight control system, 
“Auto Pitch” provides automatic control in the pitch axis and 
“Auto Roll/Yaw” provides automatic control in the roll/yaw 
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axes. The flight crew monitors the displays to verify that the 
vehicle is following the correct trajectory. In the GN&C Auto 
system, the computers process the vehicle motion sensors to 
obtain the dynamic state of the vehicle. The flight control system 
processes the flight control laws (equations) in response to 
guidance commands and commands the flight control system 
effectors. 

The computers have digital autopilot (DAP) software 
consisting of ascent thrust vector control (ATVC), main propul¬ 


sion system (MPS) command processor, SRB processor, OMS and 
RCS processors, aerosurface control, and reconfiguration logic. 


The DAP software generates acceleration profiles, trims, 
elevon load relief schedule, and scheduled gains as functions of 
earth relative velocity magnitude, mission elapsed time, and 
vehicle mass. The DAP reconfiguration logic is the bookkeeper 
of the flight control software. In response to control mode 
changes, changes in failure status, and the occurrence of events, 
the reconfiguration logic generates the indicators that are needed 
by the DAP and guidance/steering for moding sequencing and 
initialization. The attitude processor and guidance/steering soft¬ 
ware interfaces with the DAP. The attitude processor provides 
the guidance/steering with current attitude information and 
flight control computes and flies out errors between the 
guidance — commanded and actual vehicle attitude. 


LAUNCH. Prior to T minus 20 minutes, prelaunch func¬ 
tions are controlled by a ground computer network at the launch 
site. This is the launch processing system. The orbiter computers 
interact with the LPS from T minus 20 minutes (when they are 
loaded with software and formed into the four-computer 
redundant set) until liftoff. This interaction consists of the LPS 
sending commands to the computers, which follow out the 
commands and then respond to the LPS when the action is 
completed. 


Launch countdown is controlled by the LPS until 31 
seconds before launch, at which time the onboard computers’ 
automatic launch sequence software is enabled by LPS command. 
From this point, the computers take control of the sequencing of 
events and perform functions by the onboard clock, but will 
honor “Hold,” “Resume Count,” and “Recycle” commands 
from the LPS. 
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The computer launch sequence sets flags to command the 
arming of SRB ignition and hold-down release system pyro 
initiator controllers (PIC’s) and the T-0 umbilical release PIC’s. 
After a delay, the SRB ignition PIC voltages are monitored for 
acceptable levels. The hold-down release system PIC’s and the 
T-0 umbilical release system PIC’s are monitored by the LPS. 
The computer launch sequence logic initiates a countdown 
“Hold” if the SRB ignition PIC voltages fall below an acceptable 
level at any time prior to issuance of the main engine start 
commands. If the SRB ignition PIC voltages are not acceptable, 
after the start commands are issued, the engines are shut down. 

The computer launch sequence also controls certain critical 
main propulsion system valves and monitors the engine-ready 
indications from the main engines. The MPS start commands 
are issued by the onboard computers at T minus 6.6 seconds 
(staggered start - engine three, engine two, engine one - all 
approximately within one-fourth of a second) and the sequence 
monitors the thrust buildup of each engine. All three engines 
must reach the required 90 percent thrust within 3 seconds or an 
orderly shutdown is commanded up to 4.6 seconds and safing 
functions are initiated. 

Normal thrust build-up to the required 90 percent thrust 
level will result in the engines being commanded to the liftoff 
position at T minus 3 seconds as well as the Fire 1 command 
being issued to arm the SRB’s. At T minus 3 seconds, the vehicle 
base bending load modes are allowed to initialize (movement of 
approximately 650 millimeters [25-1/2 inches] measured at the 
top of the external tank —with movement towards the external 
tank). 

At T-0, the two SRB’s are ignited, under command of the 
four onboard computers, the four explosive bolts on each SRB 
are initiated (each bolt is 711 millimeters [28 inches] long and 
88 millimeters [3.5 inches] in diameter), the two T-0 umbilicals 



(one on each side of the spacecraft) are retracted, the onboard 
master timing unit, event timer, and mission event timers are 
started, the three SSME’s are at 100 percent, the ground launch 
sequence is terminated and modes the onboard computers. 

The DAP ascent configuration logic, upon ascent initializa¬ 
tion, places the main engine nozzles in the start position, places 
the SRB nozzles in the null position, and places the orbiter 
aerosurfaces in the launch position. Upon receipt of the 
command to prepare main engines for liftoff, the engines are 
commanded to the launch position. 

There are no guidance functions performed during pre¬ 
launch. Also, there are no active flight control functions, except 
for the commands to gimbal the engines for test and launch 
positions and slewing of the aerosurfaces. 

Navigation is initialized during prelaunch. At T minus eight 
seconds, the launch pad location (latitude, longitude, and atti¬ 
tude) of the navigation base is transformed to a position vector. 
Pad 39A at the Kennedy Space Center in Florida is at 28 degrees, 
36 minutes, 30.32 seconds north latitude and 80 degrees, 36 min¬ 
utes, 14.88 seconds west longitude. The Space Shuttle vehicle is 
oriented on Pad 39A with negative Z body axis (tail) pointed 
south. The launch azimuth is 64 degrees from north. The inertial 
measurement units are set inertial at T minus 20 minutes, but are 
biased for earth rotation until T minus 12 seconds, when the bias 
is removed. 

ASCENT. Boost guidance commands an attitude hold for 
approximately the first 8 seconds after liftoff so that the launch 
pad tower is cleared, SRB nozzles are above the top of the launch 
tower lightning rod, at approximately 12 meters (41 feet). After 
the vehicle clears the launch umbilical tower, a pitch profile and 
a roll begins (heads down, wings level). By about T plus 20 
seconds, the vehicle is at 180 degrees roll and 78 degrees pitch. 
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The vehicle flies upside down during the ascent phase. This 
orientation, together with trajectory shaping, establishes a trim 
angle of attack that is favorable for aerodynamic loads during the 
region of high dynamic pressure (max q) and yet results in a net 
positive load factor. 

Thrust vector control is the hub of the wheel of flight 
control. 

In the ascent phase, the four ascent thrust vector control 
(ATVC) drivers respond to commands from the guidance system. 
Thus, the TVC commands from guidance are transmitted to the 
ATVC drivers, which transmit electrical signals proportional to 
the commands to the servoactuators on each main engine and 
solid rocket booster. 

Thrust vector control closes the acceleration and rate loops 
within the outer attitude loops to generate body axis attitude 
error rates which eventually are flown out by the main engines 
and SRB’s. The main propulsion system processor of the DAP 
converts body axis and attitude error signals that are generated in 
TVC, into pitch and yaw engine bell deflection commands. The 
SRB processor of the DAP accomplishes the same functions as 
the MPS, except it is referred to as rock and tilt instead of pitch 
and yaw. 

Each main engine and solid rocket booster servoactuator 
consists of four independent two-stage servoactuators which 
receive signals from the ATVC’s. All four two-stage servovalves 
in each servoactuator control one power spool in each actuator 
which positions the actuator ram and the respective SRB nozzle 
and main engine. The four two-stage servovalves in each actuator 
provide a force summed majority arrangement to position the 
power spool. With the four identical flight conrol system com¬ 
mands to the four two-stage servovalves, the actuator force sum 
action prevents a single erroneous command from affecting power 
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Weight: 18 Kilograms (39.9 Pounds) 
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ram motion. If the erroneous command persists for more than a 
predetermined time, differential pressure sensing activates a 
selector valve, isolating and removing the defective servovalve 
hydraulic pressure, permitting the three remaining channels and 
servovalves to control the actuator ram spool. A second failure 
would isolate and remove the defective servovalve hydraulic 
pressure in the same manner as the first failure, leaving only two 
remaining active channels. Each actuator is equipped with posi¬ 
tion transducers for position feedback to the TVC system. An 
FCS CHANNEL yellow caution/warning light on the flight deck 
display and control panel will illuminate if an SRB or main engine 
actuator channel fails. 

The SRB pitch and yaw rate gyros are used exclusively 
during first stage, and control is switched to orbiter rate gyros 
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when the SRB’s are commanded to null in preparation for 
separation. Pitch and yaw axes and a combination of rate, 
attitude, and acceleration signals are blended to effect a common 
signal to both main engine and SRB TVC. In the roll axes, rate 
and attitude are summed to provide a common signal to both the 
main engine and SRB TVC. 

Orbiter rate gyros are used by the flight control system 
during ascent, entry, and aborts as feedbacks to find rate errors 


Orbiter 
Rate Gyros 



Ascent Flight Control Hardware 


) 


) 
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which are used for stability augmentation and for display on the 
commander and pilot attitude director indicators (ADI’s) rate 
needles. There are four orbiter rate gyro assemblies located in 
the mid fuselage under the payload bay. The rate gyros are 
referred to as rate gyro assemblies (RGA’s) 1 and 2 and RGA’s 
3 and 4. 

Each RGA contains three single-degree-of-freedom rate 
gyros positioned to sense rates about the roll, pitch, and yaw 
axes. All the RGA’s contain identical gyros; the only difference 
is in the manner in which each gyro is positioned within the RGA. 
Each gyro has three axes. A motor forces the gyro to rotate 
about the spin axes. When the vehicle rotates about the gyro 
input axis, a torque results in a rotation about the output axis. 
An electrical voltage proportional to the angular deflection about 
the output axis and representing vehicle rate about the input 
axis, is generated and sent through the flight aft multiplexer/ 
demultiplexers to the computers and RGA subsystem operating 
program (SOP). Selected rates are then sent to the ADI rate 
needles. The data is also sent to the display electronic unit 
CRT’s. 

The RGA’s are mounted on coldplates for cooling by the 
Freon-21 coolant loops. The RGA’s require a five-minute 
warmup time. 

SRB rate gyros are used by the flight control system during 
first-stage ascent as feedback to find rates from liftoff to two to 
three seconds prior to SRB-external tank separation. There are 
three rate gyros on each SRB. They are mounted on the forward 
ring in the forward skirt of the SRB-external tank attach point. 
The SRB rate gyros contain only two gyros, for sensing rates in 
the pitch and yaw axes. 
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SRB rate gyro data is sent through the orbiter forward 
MDM’s to the computers. The flight control system DAP uses 
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this data during first stage ascent. The SRB gyros are switched 
out of the loop two or three seconds before SRB separation and 
their yaw and pitch rate data is replaced by orbiter RGA pitch 
and yaw rate data. 

Orbiter accelerometer assemblies (AA’S) are used during 
ascent and entry for feedback to find acceleration errors, which 
are used for stability augmentation, elevon load relief during 
first-stage ascent, and during TAEM (terminal area energy 
management) and approach and landing phases. The accelerations 
transmitted to the forward MDM’s are voltages proportional to 
the sensed acceleration. They are multiplexed and sent to the 
computers, where an AA operating program conditions and scales 
the signals from the selected normal and lateral AA’s. The rates 
are then sent to flight control. The four body-mounted 
accelerometer assemblies are located in the crew compartment 
mid deck avionics bays 1 and 2. 

Each assembly contains two single-axis accelerometers 
positioned so that one senses lateral acceleration and the other 
senses normal acceleration. Lateral (left and right) acceleration is 
sensed along the Y axis and normal (vertical) acceleration is sensed 
along the Z axis (yaw and pitch, respectively). The accelerom¬ 
eters use a pendulum light beam and photo diode to provide a 
reading of acceleration. Data is also sent to the display 
electronics unit CRT’s and ADI error needles during entry. The 
AA’s are convection cooled and require a five-minute warmup 
time. 


An RGA/ACCEL red caution/warning light on the flight 
deck display and control panel informs the flight crew of an 
RGA or AA failure. 

The commander and pilot ADI’s display attitude, rate, and 
error data. 


ORBITER INERTIAL MEASUREMENT UNITS. The IMU’s 
provide orbiter orientation in inertial space and accelerations 
along vertical axis. These contain two accelerometers to sense 
accelerations and two gyros which provide an inertially stabilized 
four-gimbal platform (called cluster) that can obtain vehicle 
attitude with respect to inertial space. There are three IMU’s 
mounted on a navigation base inside the crew compartment 
forward of the flight deck display and conrol panel. 

Each IMU gyro has two output axes. Angular motion about 
any axis perpendicular to the spin axis causes rotation about a 
third orthogonal axis, which contain components of rotation 
about the two output axes. The appropriate gimbals are torqued 
to null the gyro rotation. The gimbal torquing in response to 
vehicle motion results in an inertially stabilized platform. In 
addition to torquing in response to vehicle motion, the gyros 
may be pulse torqued (small angles) or slewed (large angles) by 
software which results in gimbal torquing to position or 
reposition the platform. Each gimbal has coarse (one-speed) and 
fine (eight-speed) resolvers. The resolver readouts are sent to the 
forward MDM’s and then to the computers. 

The two IMU accelerometers are a pendulous mass anchored 
to a case. Acceleration produces relative motion between the 
mass and the case. The motion is sensed and voltage is applied to 
counteract the motion. The voltage required is proportional to 
the acceleration. The voltage is electronically converted to pulses 
which are accumulated. The accumulated data pulses represent 
velocity and are sent to the computers via the forward MDM’s. 
One accelerometer senses acceleration along two axes, X and Y, 
and the other senses delta velocity along a Z axis. These X, Y, 
and Z axes are not vehicle axes. 

The three IMU’s are initially aligned so that their cluster 
orientations are skewed relative to one another, which results in 
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Equipment Installation 
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OrbiterlMU’s 


only one IMU being exposed to “gimbal flip” conditions at any 
one time. The gimbal sequence is outer roll, pitch, inner roll, and 
azimuth. The inner roll gimbal is redundant to the outer roll. By 
maintaining the pitch gimbal perpendicular to the yaw-azimuth 
gimbal and by mechanizing two roll gimbals, “gimbal lock” is 
avoided, but “gimbal flip”becomes a possibility with pure yaw 
motion at a pitch of 90 to 270 degrees. 

The selected data from the IMU operating program is used 
by flight control for coordination and guidance for steering 
commands. Attitude angles are displayed on the ADI’s and 
horizontal situation indicators (HSI’s). The selected delta veloci¬ 
ties are used by navigation to determine the three position and 
three velocity components of the state vector and by guidance 
and flight control for moding. IMU status is also displayed on the 
CRT’s. 


The accuracy of the IMU deteriorates with time. If the 
errors are known, they can be physically or mathematically 
corrected. Software based on preflight calibrations is used to 
compensate for most of the inaccuracy. The star trackers and 
crew optical alignment sight (COAS) are used to determine 
additional inaccuracy and provide the means of aligning the 
IMU’s to remove the errors, when in orbit. 

Each IMU is cooled by cabin air drawn into and circulated 
within the casings by IMU fans. Critical temperatures are 
maintained by automatic heater circuits within each IMU. An 
IMU red caution/warning light on the flight deck display and 
control panel informs the flight crew of an IMU failure. 

DEDICATED DISPLAY INSTRUMENTS. These are located 
on the orbiter crew compartment flight deck display and control 
panels. The dedicated display software performs the processing 
required to accept, prepare, and output guidance, navigation, and 
control data to the dedicated display indicators. The dedicated 
display indicators are the ADI’s, HSI’s, alpha-Mach indicators 
(AMI’s), attitude vertical velocity indicators (AVVI’s), and 
surface position indicators (SPI’s). There are two sets of ADI’s, 
HSI’s, AMI’s and AVVI’s at the flight deck commander and pilot 
stations. There is only one SPI. Another ADI is located on the 
flight deck aft flight display and control panel. 

The display driver unit (DDU) is an electronics unit that 
connects the computers and the primary flight displays. The 
DDU receives data signals from the computers and decodes them 
to drive the dedicated displays. The unit also provides dc and ac 
power for the ADI’s and RHC’s. The DDU contains logic for 
setting flags on the dedicated instruments for such items as data 
dropouts and failure to synchronize. The orbiter contains three 
DDU’s, one at the commander’s station, one at the pilot’s 
station, and one at the aft station. 










Space Shuttle Spacecraft Systems 




Display and Control System 


1 ? 3 4 5 

m 4 5 6 7 8.9 0 I n < 5 6 ? 8 9 0 1 n < U ? 8 9 0 1 ? 3 4 5 6 ? 8 9 0 I n 4 5 6 7 8 9 0 1 



Launch Trajectory Typical Display 


12 3 4 5 

12345678901234567890123456789012345678901^345678901 



457 


12 3 4 5 

123456789012345678901234567890123456789012345678901 







































































































































Space Shuttle Spacecraft Systems 



The three ADI’s indicate the vehicle’s roll, pitch, and yaw 
attitude via a gimbaled ball, attitude errors via three needles, and 
attitude rates via three pointers. The angles displayed on the 
three ADI’s are generated in the attitude processor from IMU 
data and indicate the orbiter’s roll, pitch, and yaw via the 
gimbaled ball. The attitude error needles are superimposed on the 
top face of the ADI ball and provide attitude error information 
in roll, pitch, and yaw. The needles are driven in first- and 
second-stage ascent by attitude errors generated in guidance. The 
rate pointers are positioned on the indicator outside the ADI ball 
and provide rate information from the rate gyro assemblies. The 
ADI also provides an OFF flag to indicate when the attitude 
display may be invalid. The needles and pointers have a stored 
(out of view) position which is also used to indicate invalid 
conditions. 

In first-stage ascent, the ADI’s monitor the roll, pitch, and 
yaw of the vehicle and ensure that attitude rates remain within 
their limits. During second-stage ascent, the ADI’s confirm that 
second-stage guidance has initiated the monitor hold for external 
tank separation. 

FIRST-STAGE ASCENT. During first-stage ascent, it is 
sometimes necessary to relieve loads on elevon hinges that result 
from high shears. This is performed automatically by a load relief 
logic which drives the elevons to the appropriate positions to 
relieve the aerodynamic adverse hinge moment loads. This logic 
also holds the body flap and rudder/speedbrake in place during 
ascent. The SPI displays the position of the aerosurfaces. 

During first-stage ascent, the pre-stored guidance program 
works open-loop in that it selects an initialized-loaded roll, pitch, 
and yaw command based on vehicle relative velocity. An 
initialized-loaded table is accessed by software and commands 
the vehicle attitude needed to obtain the desired SRB separation 
attitude and orbit inclination. 


Guidance also is responsible for issuing throttle commands 
to the main engines. These commands also are initialized-loaded. 
There are four initialized-loaded slots for throttle settings and 
they are referenced to relative velocity. The main engines are at 
100-percent thrust from liftoff to approximately one minute; 
they are throttled to 65 percent at 10-percent thrust/second to 
limit dynamic pressure (maximum q). The engines are held at 
65 percent for approximately 24 seconds and are then throttled 
back up to 100 percent at 10 percent thrust/second to maintain 
constant 3 g’s in the initial development flights. The thrust 
profile reduces heating and vehicle loads during maximum 
dynamic pressure. 

Navigation programs in first-stage ascent are responsible for 
providing accurate knowledge of the vehicle state vector through 
the use of IMU-sensed velocity changes and a mathematical 
model of the earth’s gravitational forces. This function can be 
used to aid in driving the CRT’s predictor. 

Boost guidance is responsible for performing the “table 
lookup” of the appropriate roll, pitch, and yaw command 
depending on relative velocity. The table used depends on how 
many main engines are thrusting. If one engine fails, guidance 
automatically recognizes the failure and lofts the trajectory, 
commanding the remaining two main engines to 100-percent 
thrust for the remainder of first-stage ascent in the initial 
development flights. Each main engine controller is used during 
the ascent phase to monitor the operation of an engine, issue 
inhibit commands to prevent a second engine from automatically 
shutting down when one has shut down, monitor the state of the 
flight deck crew displays and switches from the switch processor, 
and issues appropriate commands. The controllers also monitor 
GN&C software for the proper time to check the main propulsion 
system liquid oxygen and liquid hydrogen low level sensors, 
monitor GN&C software for proper time of main engine cutoff 
(MECO), and issue the closure of the main propulsion system 
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Attitude Director Indicator (ADI) - Displays 360° Maneuvers in Roll, Pitch, and Yaw 

• Positive Roll Command - Ball Rotates Counterclockwise 

• Positive Pitch Command - Ball Rotates From Top to Bottom 

• Positive Yaw Command - Ball Rotates From Right to Left 

• Error Needle Reflections to Positive Commands 

Roll - Left 
Pitch - Down 
Yaw - Left 

• Rate Pointer Deflection to Positive Commands 
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Yaw - Right 



459 


Dedicated Displays - First Stage Ascent 
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liquid oxygen and liquid hydrogen prevalves after engine 
shutdown. 

SRB separation is normally performed automatically by the 
onboard computers; however, the flight crew can command 
separation through switches on the flight deck display and 
control panel. The automatic sequence is initiated by the 
software in the computers when the chamber pressure of both 
SRB’s is below 2587 millimeters of mercury (mmHg) (50 psi). 

At SRB separation command, a three-axis attitude hold is 
commanded for four seconds. When the SRB separation com¬ 


mand is received, the SRB nozzles are positioned to null and the 
flight control system is switched to the orbiter rate gyro assem¬ 
blies. Four seconds after SRB separation, second-stage (main 
engine) guidance takes over. In addition, if a main engine shut¬ 
down is detected, the failed engine is positioned to null and trim 
changes are commanded on the remaining engines. 

SECOND-STAGE GUIDANCE. Second-stage guidance is 
completely changed from first stage. It is a closed-loop function 
that computes each cycle where the vehicle should be so that an 
initialized-loaded MECO target can be reached. Commands are 
generated to place the vehicle in a desired position with a desired 
velocity and with minimal fuel usage. The desired position and 
velocity are determined from a set of initialized-loaded condi¬ 
tions. The parameters defining MECO target are target-velocity, 
flight-path angle, target radius from earth center, and desired 
orbital plane. The MECO target conditions are selected primarily 
to ensure correct placement of the external tank splashdown. 

The first phase of second-stage ascent extends from the SRB 
separation command until the earliest time at which an abort 
once around (AOA) is possible with a single engine failure. This 
assumption causes a lofted trajectory during the first phase so 
that MECO conditions can be reached with the use of only two 
engines. 

The second phase of second-stage ascent begins at the 
earliest time at which an AOA is possible with a single engine 
failure and continues until an acceleration of 3 g’s is reached. The 
remainder of the second phase assumes use of three engines. 

The third phase begins when thrust acceleration reaches 
3 g’s. At this point, a 3-g limiting software program begins to 
adjust the throttle command so that acceleration does not exceed 
3 g’s. If the vehicle is sufficiently heavy, or if main engine 
performance is degraded, the 3-g limit may not be reached before 
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Ascent Major Modes 


MECO. In this case, the third phase would not be entered, and 
the second phase would continue until MECO. Also, if an engine 
failure occurred during the third phase, the acceleration would 
decrease, and the second phase would be re-entered. 

The hardware utilized in second-stage ascent is the same as 
that used in first stage except that the body-mounted accelerom¬ 
eters are not used and the elevons are held in place. 

Second-stage navigation is exactly the same as for first stage. 


At MECO minus ten seconds, the MECO sequence begins 
and three seconds later the main engines are commanded to begin 
throttling at 10-percent thrust/second to 65 percent thrust. This 
is held for 6.7 seconds, and the main engines are then cut off. 


External tank separation is performed automatically by the 
onboard computers; however, the flight crew can command it 
through the flight deck display and control panel. The automatic 
sequence is initiated by the GN&C moding, sequencing, and 
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(§) Major Mode 
Transition 

(4) MECO Confirmed to 104 

(3) MECO Command (J) External Separation 
(D Guidance Initiation 


(T) SRB Separation Command 


Downrange 

Second-Stage Ascent 


Command 


control when the main engine operations sequence has deter¬ 
mined that all of the engines have shut down and the MECO 
CONFIRMED flag is set. 

The main engine operations sequence is checked and if set 
and shutdown commands have been issued for that engine, its 
prevalves are closed after a delay. A MECO CONFIRMED flag is 
set after it has been confirmed that all engines have entered the 
shutdown phase. Also, a flag is set for the external tank 
separation sequence after the prevalves for all engines have been 
commanded closed. This is necessary because shutdown times 
may differ. 

First, the computer operation program determines the mode 
of separation of if the separation is to be manually inhibited. It 
then arms the umbilical plate pyro initiator controllers, arms and 
fires the external tank tumble system after all the engine pre¬ 
valves have been commanded closed, closes the feedline discon¬ 
nect valves, gimbals the main engine nozzles to the proper 
position, deadfaces the external tank-orbiter interface, and 
unlatches and retracts the umbilical plates. 

The sequence then arms the structural separation pyro 
controllers, performs some limit tests on certain body rates, and 


tests for feedline disconnect valve closure. If any test is not 
satisfied, the separation is inhibited and can occur only if the 
out-of-tolerance parameter comes back within tolerance or if the 
flight crew elects to continue the separation by overriding the 
inhibit. When either of these conditions is satisfied, the structural 
separation pyro initiators are fired. 


After initiation of the orbiter-external tank separation 
sequence, there is an approximate 11-second mated coast and 
then the orbiter and external tank separate. The external tank 
tumble system is activated approximately two seconds after 
MECO to produce a tumble rate of 10 to 50 degrees per second 
after separation. The external tank is on a suborbital trajectory 
that results in an impact location in the Indian Ocean. External 
tank breakup nominally will occur during its entry into the 
earth’s atmosphere at approximately 56,388 meters (185,000 
feet) altitude. 


At MECO, orbiter attitude commands (roll, pitch, and yaw) 
are frozen, and body rate damping is maintained during the coast 
period by the RCS. Just prior to external tank structural release * 
the RCS is inhibited, then reenabled immediately after external 
tank structural separation to an inertial attitude hold, followed 
by an RCS minus-Z translation maneuver. Four forward and six 
aft RCS jets are used to achieve a translation of 1.2 meters per 
second (four feet per second) vertically to ensure orbiter clear¬ 
ance from the arc to the rotating external tank. The orbiter 
continues to coast away from the external tank in the inertial 
altitude hold mode to obtain additional vertical clearance. When 
the orbiter has gained a velocity of 1.2 meters per second (four 
feet per second) vertically, the separation is flagged complete and 
the ground is responsible for issuing a go/no go for the impending 
OMS-1 thrusting sequence. OMS-1 time of ignition is set for 
MECO plus two minutes and is normally accomplished with the 
two OMS engines. 
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External Tank Separation 


At launch and during the pre-MECO phase, the OMS engine 
nozzles are stowed to protect the nozzles from aerodynamic and 
thermal loads during ascent. 

CONTROL STICK STEERING (CSS). This mode is similar 
to the automatic mode, except the flight crew commands three- 
axis motion using the rotation hand control. The computers 
process the commands from the RHC and motion sensors and 
the flight control system interprets the RHC motions (fore and 
aft, right and left, clockwise and counter-clockwise) as rate 
commands in pitch, roll, or yaw and process the flight control 
law (equations) to enhance control response and stability. 


CSS pitch or roll/yaw modes are selected by depressing the 
applicable pushbutton indicator at the commander’s or pilot’s 
eyebrow/glareshield control and display panel. The pushbutton 
depressed will illuminate at both stations, downmoding that axis 
from automatic to CSS. 

Three rotation hand controller’s are provided, one each at 
the commander, and pilot stations and a third at the aft flight 
deck display and control panel. Each RHC moves about three 
axes. The RHC deflection produces a rotation in the same 
direction as the crew member’s line of sight. Each RHC has a 
deadband of 0.25 degree in all three axes. To move the RHC 
beyond the deadband, an additional force is required. At an 
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amount of deflection called the soft stop, a step increase in the 
force required for further deflection occurs. When a software 
detent position is exceeded, the RHC assumes manual control. If 
a malfunction occurs in the left (commander’s) RHC or right 
(pilot’s) RHC, it illuminates a red left or right RHC caution/ 
warning light on the display and control panel. 


The aft RHC is used only in orbit, for rendezvous and 
docking with an unmanned vehicle. Software performs the 
necessary transformations on the aft RHC commands to make 
them common to the commander’s and pilot’s RHC in rotation 
of the same direction relative to the crew member’s line of sight. 

Each RHC contains nine transducers: three redundant 
transducers sense pitch deflection, three sense roll deflection, and 
three sense yaw deflection. The transducers produce an electrical 
signal proportional to the deflection of the RHC. The three 
transducers are called Channels 1, 2, and 3; the channel selected 
by redundancy management provides the command. Each 
channel is powered by a separate power supply in the associated 
display driver unit. 

MANUAL THRUST VECTOR CONTROL. This capability 
is provided during first- and second-stage ascent. This is accom¬ 
plished by substituting the inputs from the RHC for the auto¬ 
matic commands from guidance to gimbal the main engines and 
SRB’s during first stage or the main engines during second stage. 
The DAP remains active to process the flight crew’s input. This 
is referred to in this mission phase as manual thrust vector control 
(MTVC). MTVC is available at liftoff (SRB ignition command 
plus 0.365 second). One of the CSS pushbuttons at the glareshield/ 
eyebrow panels must be depressed before MTVC is available. 

Once MTVC is activated, the vehicle is in a rate-command/ 
attitude-hold mode in all axes. When the RHC is in detent, with 
MTVC selected, the vehicle is in attitude hold. The DAP holds 
the vehicle in the attitude it had when the RHC was in detent. A 
rate command equal to zero replaces the rate command 
generated in guidance and control steering. The attitude error for 
the DAP is computed by integrating the rate gyro assemblies 
measured rates. However, there are limits on vehicle rates and 
attitude errors. If the limits are exceeded when attitude hold is 
requested by placing the RHC in detent, attitude hold will not be 
initiated until the rates and errors are within limits. 

















Space Shuttle Spacecraft Systems 



When the RHC is removed from detent, a rate command 
proportional to the amount of deflection replaces the rate 
command previously generated. The attitude error is zeroed. The 
larger the deflection of the RHC, the larger the command. The 
flight control system compares these commands with inputs from 
the rate gyro assemblies and accelerometer assemblies (what the 
vehicle is actually doing—motion sensors) and generates control 
signals to produce the desired rates. When the commander or 
pilot release the RHC, it returns to center and the vehicle will 
maintain its present attitude (zero rates). 

MANUAL THROTTLING. Throttling of the main engines 
also is possible through use of the speedbrake/thrust control 
(SBTC) at the pilot station. Manual throttling is accomplished by 
depressing the takeover switch on the SBTC. The automatic thrust 
command is frozen until the MAN (manual) white light in the 
SPD BK/THROT pushbutton at either station is illuminated. This 
means the SBTC has matched the frozen automatic command. 
The takeover switch on the SBTC is then released and the pilot 
has control of throttling. This method prevents undesirable 
transients in throttle commands during takeover. 

At the forward setting, thrust level is the highest. Rotating 
the SBTC back decreases the thrust. Each SBTC contains three 
transducers (Channels 1, 2, and 3) which produce a voltage pro¬ 
portional to deflection. Redundancy management selects the 
output. 

TRANSITION DAP. The transition DAP flight control mode 
controls the orbiter in response to automatic or manual com¬ 
mands during insertion and deorbit. The effectors used to produce 
control forces and moments on the orbiter are the two OMS 
engines and the 38 primary RCS engines. At main engine cutoff, 
rotation and translation control of the spacecraft is provided by 
commands issued to the forward and aft RCS jets. The forward 
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and aft RCS also provide attitude control and three-axis transla¬ 
tion during external tank separation, on-orbit maneuvers and roll 
control for a single OMS engine operation. The OMS provides 
propulsive and three-axis control for orbit insertion, orbit 
circularization, orbit transfer, and rendezvous. Failure of a single 
OMS engine will not preclude a nominal orbit insertion. 
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Normally, the first OMS thrusting period raises the low 
elliptical orbit following external tank jettison and the second 
OMS thrusting places the spacecraft into a circular orbit as 
designated for that mission. For orbital maneuvers utilizing 
the OMS, any delta velocities greater than 1.8 meters per second 
(6 feet per second) utilize the two OMS engines. 

Orbit insertion guidance, navigation, and flight control 
software, through the transition DAP, controls the external 
tank/orbiter separation maneuvering, OMS-1 and OMS-1 ignition 
attitude, OMS thrusting commands, OMS engine gimbaling for 
thrust vector control, and RCS thrusting commands in conjunc¬ 
tion with the use of the ORBITAL DAP control panels. 

Two ORBITAL DAP pushbuttons provide automatic and 
manual modes to the transition DAP program. The pushbuttons 
are illuminated by software commands in accordance with the 
mode selected and accepted by flight control software. 

Navigation incorporates IMU delta velocities during 
powered flight and coasting flight to produce orbiter state 
(position and vector). 

The transition DAP reconfiguration logic controls the 
moding, sequencing, and initialization of the control law modules 
and sets gains, deadbands, and rate limits. The steering processor 
is the interface between the guidance or manual steering com¬ 
mands and the transition DAP. The steering processor generates 
commands to the RCS processor, which generates the RCS jet 
commands required to produce the commanded spacecraft 
translation and rotation using attitude and rotational rate signals, 
or translation or rotation acceleration commands. The OMS 
processor generates OMS engine gimbal actuator thrust vector 
control commands to produce desired spacecraft/engine relation¬ 
ship for commanded thrust direction. 
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When in the automatic DAP mode, the external tank 
separation module initialized by the external tank separation 
sequencer compares Z delta velocities from the DAP attitude 
processor with an initialized-loaded desired Z delta velocity. 
Before this value is reached, the transition DAP and steering 
processor sends commands to the RCS jet selection logic which 
uses a table look-up technique for the primary RCS jets and 
commands 10 RCS jets to fire in the plus Z direction. When the 
desired Z delta velocity is reached, the translation command is 
set to zero. Rotation commands are permitted during the 
external tank separation sequence. 


The RCS jet selection module receives both RCS rotation 
and translation commands and, using the table look-up tech¬ 
nique, outputs 75 discretes to the primary RCS jets to turn the 
38 jets on or off. 

The RCS reaction jet driver forward and aft assemblies 
provide the turn-on/turn-off jet selection logic signals to the RCS 
jets. There is also a driver redundancy management program that 
permits only “good” RCS jets to be turned on. The RCS JET 
yellow caution/warning light on the flight deck display and 
control panel indicates a failed on, failed off, or leaking RCS jet. 

The 19 RCS jets thrusting in the plus or minus Z direction 
provides Z translation and roll or pitch rotation control and are 
considered independent of other axes. The 12 RCS jets thrusting 
in the plus or minus Y direction provide Y translation, and yaw 
rotation only. The seven RCS jets thrusting in the plus or minus 
X direction provide X translation only. 

Before the first OMS ignition, the spacecraft is maneuvered 
to the OMS ignition attitude by using the RHC and RCS jets; this 
reduces transient fuel losses. 
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• Conventional Analog and • 28-vdc Power Only 

Digital Circuitry • Environmentally 

• Conventional Printed Sealed 

Circuit Cards • Cold-Plate-Cooled 



Weight, 

Power (LRU Only), W 


kg (lb) 

Normal Quiescent 

Maximum 

Aft Unit 

15.0 (33.0) 

27.4 

62.6 

Forward Unit 

13.8 (30.4) 

20.3 

41.4 


Reaction Jet Driver 


ORBITAL DAP. The two orbital DAP control panels have 
two sets of pushbuttons, one set for manual rotation and one set 
for translation. There are nine pushbuttons for translation and 
nine for rotation. Those for translation are on axis-by-axis basis. 
The nine pushbuttons for rotation are for each of the three 
rotation body axes. The pushbuttons are illuminated in accord¬ 
ance with the mode selected and accepted by flight control 
software commands. 
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For the OMS thrusting period, the orbital state (position 
and vector) is produced by navigation incorporating IMU delta 
velocities during powered flight and coasting flight. This state is 
sent to guidance, which uses target inputs through the CRT to 
compute thrust direction commands and commanded attitude 
for flight control and thrusting parameters for CRT display. 
Flight control converts the commands into OMS engine gimbal 
angles for an automatic thrusting period. OMS thrust vector con¬ 
trol for normal two-engine thrusting is entered by depressing 
the ORBITAL DAP AUTO pushbutton with both RHC’s within 
software detents. OMS manual TVC for both OMS engines is 
entered by depressing the ORBITAL MAN DAP pushbutton or 
by moving the commander or pilot RHC out of any one of the 
three detents. The manual RHC rotation requests are converted 
into gimbal angles. OMS thrust in either case is applied through 
the spacecraft center of gravity. 

Automatic thrust vector control for one OMS engine is 
identical to that for two OMS except that the RCS processor is 
responsible for roll control. Single-OMS engine thrust also is 
through the spacecraft’s center of gravity, except when pitch or 
yaw rate commands are non-zero. If the left or right OMS engine 
fails, an OMS TVC red light on the flight deck display and 
control panel will illuminate. 

Since an OMS cutoff is based on time rather than velocity, a 
velocity residual may exist following OMS cutoff. The residual is 
zeroed using the RCS via the THC. 

TRANSLATION HAND CONTROLS. There are two trans¬ 
lation hand controls, one at the commander’s station and one at 
the aft flight deck station. These are used for manual control of 
translation along the longitudinal (X), lateral (Y), and vertical (Z) 
vehicle axes. The commander’s THC is active during orbit 
insertion, in orbit, and during deorbit. The aft flight deck station 
THC is active only during the oribital phase. Each THC contains 



six three-contact switches, one each in the plus and minus 
directions for each of the three axes. Moving the THC to the 
right commands translation along the plus Y axis, closes three- 
switch contacts (referred to as Channels 1, 2, and 3), and the 
selected redundancy management channel provides the command. 
The aft THC is used when the flight crew is using the aft flight 
deck station. 

In the transition DAP, the commander’s THC is active and 
totally independent of the flight control orbital DAP push¬ 
buttons or the RHC position or status. Whenever the com¬ 
mander’s THC is out of detent, plus or minus X, Y, or Z, transla¬ 
tion acceleration commands are sent directly to the RCS jet 
selection logic for continuous RCS jet firings. Rotational com¬ 
mands may be sent simultaneously with translation commands 


Switch Assemblies 
(Triply Redundant) 



Weight: 2.5 Kilograms (5.6 Pounds) 
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For automatic rotations, attitude requests are input through the 
flight deck display and control panel CRT and attitude and rate 
information from flight control goes to guidance. Guidance 
sends attitude and rate commands to flight control and displays 
attitudes, errors, and rates on the CRT. Flight control converts 
these commands into RCS thrusting commands. 

The orbital digital autopilot also can be operated in 
automatic or manual modes. AUTO or MAN pushbuttons are 


used to mode the RCS for automatic or manual rotation 
operation. The ORBITAL DAP SELECT A or B pushbuttons 
select the values the DAP will use from the DAP configuration 
parameter limits CRT display software loads. The values of 
attitude deadband, rate deadband, and vehicle change in rotation 
rate due to minimum impulse RCS thrusting are a function of 
DAP A or B selection and jet selection NORM (normal-primary) 
or VERN (vernier). Vernier selection prohibits all translation 
commands. 
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The jet selection logic uses a table look-up technique for the 
primary jets similar to the transition DAP. Unlike the transition 
DAP, the orbital jet selection logic checks for high or low rota¬ 
tion mode for both pitch and yaw for the forward and aft RCS 
jets. There are special tables for the high plus Z translation mode 
not used by the transition DAP. Angular rate increments are pre¬ 
dicted for each group of primary jets and for each specific vernier 
jet. The primary jet predictions are based on one nominal inertia 
matrix and center of gravity. The vernier predictions are based 
on nominal or one of five different payload configuration (with 
the manipulator arm extended) inertia matrixes. The rotation 
compensation logic uses a combination threshold set on the DAP 
specialist display and counter (or accumulator) in determining 
when to command RCS jets on for rotation compensation. 

The AUTO pushbutton permits the automatic RCS rotation 
and movement of any RHC out of detent (any axis) downmodes 
the DAP from automatic to manual as will depressing the MAN 
pushbutton. All active RHC’s must be in detent when an AUTO 
pushbutton is depressed in order to upmode to automatic RCS 
rotation mode. The control pushbuttons are illuminated by 
software commands in accordance with the mode selected and 
accepted by flight control software. 

Automatic rotation commands are supplied by the universal 
pointing processor. The universal pointing processor via the 
operational sequence display provides: three-axis automatic 
maneuver, tracking local-vertical/local-horizontal about any body 
vector, rotating about any body vector at the DAP discrete rate, 
and stopping any of these options and commanding attitude 
hold. The parameters of these maneuvers are displayed in cur¬ 
rent attitude, required attitude, attitude error, and body rates. 
Either total or DAP attitude errors may be selected for the dis¬ 
play and the ADI error needles. 


The automatic maneuver option calculates a commanded 
vehicle attitude and angular rate or to hold a vehicle attitude. 
The desired inertial commanded and rotation attitude is input 
into the operational sequence display in pitch, yaw, and roll. 
When the maneuver option is selected, universal pointing sends 
the required attitude increment and body rate to flight control, 
and flight control performs the maneuver when the DAP is in 
automatic. 

The automatic rotation option calculates a rotation about a 
desired body axis. This option is used for passive thermal con¬ 
trol, also known as barbecue. Pitch and yaw body components 
of the desired rotational axis are first input. The orbiter is ma¬ 
neuvered automatically or manaully so that the rotational axis is 
oriented properly in inertial space. When the rotational option 
is selected, universal pointing will calculate the required body 
attitude and send it to flight control. Flight control performs the 
maneuver if the DAP is in automatic. 

The local-vertical/local-horizontal automatic option cal¬ 
culates the attitude necessary to maintain LVLH with a desired 
body orientation. It calculates the attitude necessary to track 
the center of the earth with a given body vector. Pitch and yaw 
body components of the desired pointing vector are input first. 
Omicron (roll angle about the pointing vector) is then input. 
When the LVLH option is selected, the required LVLH attitude 
and the maneuver to get to that attitude are calculated and sent 
to flight control. When the LVLH attitude is reached, universal 
pointing will calculate an attitude and send it to flight control. 
Flight control performs the maneuver if the DAP is in automatic. 

The automatic stop/attitude hold option cancels universal 
pointing processing of the automatic maneuver, rotation, or 
LVLH options. When the stop/attitude hold option is selected, 
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universal pointing will cancel the processing of the maneuver 
options and send the current attitude to flight control. When 
flight control is in automatic, attitude hold will be initiated 
about the current attitude. 

Manual rotation commands are controlled by the three 
RIIC’s and either of the two orbital DAP control panels. 

The rotation discrete rate pushbuttons select the “DAP- 
load” rates in effect (one for normal and one for vernier) desig¬ 
nating specific rotational rates in the manual rotation mode. 
These body rates are commanded as long as the RHC is between 
the detent and the software softstop for the axis selected. 
Attitude hold is commanded when the RHC is in the detent, and 
the attitude reference used is the attitude sensed at the time the 
RHC reached the detent. Free drift exists on the affected axis 
between the softstop and the detent when the RHC is returning 
to the detent after having been past the softstop. 

The ROTATION ACCEL pushbutton changes the mode to 
acceleration (continuous thrusting) when depressed and the RHC 
moved out of the affected axis detent in the manual rotation 
mode. This mode is available any time the RHC is past the 
software stop, regardless of mode selected. Free drift is in effect 
when the RHC is in the detent of the axis or axes selected. 

The ROTATION PULSE pushbuttons enable a one-time 
rotation (open-loop) rate command in accordance with the value 
selected in the manual rotation moding. Body rate increments 
are set for both primary and vernier RCS jets as well as control 
acceleration available for each body axis for both primary and 
vernier RCS jets. Each time the RHC is out of detent, a com¬ 
mand is generated at a predetermined body rate about a selected 
axis or axes. It is used in the calculation of the time required for 
the orbiter to reach the commanded rate increment (or rate 
increment sum), hence the time the command is active to the 


RCS jet selection logic. This rate is commanded each time the 
RHC is moved out of detent and is cumulative for multiple RHC 
commands. Free drift is in effect when the RHC is below the 
softstop. 

Rotation options may be mixed as they are made axis by 
axis. Requests for changes in rotation options with the manual 
mode pushbuttons are not recognized when the RHC is out of 
detent. 

Manual translation commands are controlled by the two 
THC’s and either of the two ORBITAL DAP control panels. 

There are two translation acceleration options: high and 
normal. The high mode commands all RCS jets in that axis to 
thrust, whereas in the normal mode, only selected RCS jets 
thrust. The moding is a function of the jet selection logic soft¬ 
ware and cannot be changed by the flight crew. Applicable RCS 
jets will thrust continuously as long as the THC is out of detent 
in one or more axes. 

The TRANSLATION PULSE pushbuttons select a specific 
delta velocity in feet per second each time the THC is moved out 
of the detent for the axis or axes concerned in the manual 
translation mode. The commands are cumulative, and the 
incremental delta velocity is the value set on the DAP specialist 
display. 

The attitude processor combines commanded attitude with 
the reference from the IMU to form attitude errors, which are 
sent to the ADI along with attitude. Body rates from flight 
control also are sent to the ADI. 

STAR TRACKERS. The star trackers provide orbiter’s 
orientation with respect to stars. The two star trackers are used 
in orbit to align the IMU’s. The star trackers are located just 
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forward of the crew compartment on the left side of the orbiter 
in a well on the extension of the navigation base on which the 
IMU’s are mounted. They are slightly inclined off the vehicle 
negative Y and negative Z axes. 

Each star tracker has a door which is closed during ascent 
and entry and opened in orbit. Each door rotation is driven by 
two electric motors. Limit switches stop the motors and drive a 
talkback when the door has reached limits of full travel, open or 
closed. Both doors have thermal protection to prevent heat leaks 
into the star tracker well during entry. 

The star trackers are a strapped-down, wide field of view, 
image-dissector, electro-optical tracking device. Their major 
function is to search for, acquire, and track the 50 brightest navi¬ 
gation stars. By knowing the relationship of the star tracker 
to the orbiter and the location of the star in space, a line-of-sight 
vector from the orbiter to the star is defined. Two line-of-sight 
vectors define the orbiter inertial attitude. The star trackers 
align the IMU’s and provide angular data from the orbiter to a 
target. Star tracker data is sent to the computers via the MDM’s. 

The difference between the inertial attitude defined by the 
star Tracker and IMU is processed by software and results in IMU 
torquing angles. If the IMU gimbals are torqued or the matrix 
defining its orientation is recomputed, the effects of the IMU 
gyro drift are removed and the IMU is restored to its inertial 
attitude. If the IMU alignment is in error by more than 0.5 
degree, the star tracker is unable to acquire and track stars 
correctly. This is because the angles the star tracker is given for 
searching are based on the current knowledge of the orbiter 
attitude, which is based on IMU gimbal angles. If that attitude is 
greatly in error, the star tracker may acquire and track the wrong 
star. In this case, the crew optical alignment sight must be used 
to re-align the IMU’s to within 0.5 degree and then the star 
trackers used to re-align the IMU’s more precisely. 


The star tracker includes a light shade assembly and an 
electronics assembly mounted on top of the navigation base. The 
light shade assembly defines the field of view of the tracker 
(10 degrees square). It contains a shutter mechanism which can 
be opened manually by the crew using an entry on the CRT dis¬ 
play. It may be opened and closed automatically by a bright 
object sensor. The bright object sensor reacts before a bright 
object such as the sun or moon could cause damage to the star 
tracker (the sensor has a larger field of view than the star tracker 
shutter). 


The electronics assembly contains an image dissector tube 
mounted on the underside of the navigation base. The star 
tracker itself does not move. The field of view is scanned 
electronically. It may be commanded to scan the entire field of 
view or a smaller offset field of view (1 degree square) about a 
point defined by horizontal and vertical offsets. When an object 
of proper intensity and in the correct location is sensed, it is 
tracked. Star tracker outputs are the horizontal and vertical 
position within the field of view of the object being tracked and 
its intensity. The orbiter may have to be manually maneuvered 
to position the object in the star tracker field of view. The flight 
crew cannot sight through the star tracker. They may use the 
COAS in its negative Z mount to verify the negative Z star 
tracker is tracking the correct star. 


There is no redundancy management for the star tracker 
assemblies; they operate independently and either can do the 
whole task. They can be operated either singly or both at the 
same time. 


The warmup time is 15 minutes. The door-open time with 
two electric motors is 60 seconds and with one motor is 120 
seconds. 
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CREW OPTICAL ALIGNMENT SIGHT. This is used as a 
backup to the star trackers for aligning the IMU’s. A secondary 
use of the COAS is as the primary optical docking device to 
measure range and rotational rates and allow crew members to 
align the vehicles and permit docking. The COAS also allows the 
flight crew to reassure themselves of proper attitude orientation 
during deorbit thrusting periods. 

The COAS is an optical device with a reticle projected on a 
combining glass focused on infinity. A light bulb with variable 
brightness illuminates the reticle. 

The COAS may be located in two locations. There are 
two mounts, one over the positive X commander’s window, and 
one next to the aft flight deck right overhead negative Z window. 

After mounting the COAS on the desired location, the crew 
member must manually maneuver the orbiter until the selected 
star is in the field of view. The crew member maneuvers the 
orbiter so that the star will cross the center of the reticle. At the 
instant of the crossing, the crew member “makes a mark,” which 
means he depresses the ATT REF (attitude reference) push¬ 
button. At the time of the mark, software stores the gimbal 
angles of the three IMU’s. The mark can be taken again if it is 
felt the star was not centered as well as it could have been. When 
the crew member feels a good mark was taken, the software is 
notified to accept it. Good marks for two stars are required for 
an IMU alignment. 

By knowing the star being sighted and the COAS location 
and mounting relationship in the orbiter, software can determine 
a line-of-sight vector from the COAS to the star in an inertial 
coordinate system. Line-of-sight vectors to two stars define the 
attitude of the orbiter in inertial space. This attitude can be 
compared to the attitude defined by the IMU’s and, if the IMU’s 
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are in error, they can be realigned to the more correct orientation 
by the COAS sightings. 

An additional COAS is used at the aft flight deck station to 
check the alignment of the payload bay doors. 

The COAS requires 115-volt ac power for reticle illumina¬ 
tion. The COAS is 241 x 152 x 109 millimeters (9.5 x 6.0 
x 4.3 inches) and weighs 1.13 kilograms (2.5 pounds). 

ORBITAL OPERATIONS. An orbital operations sequence/ 
major mode is provided for orbital checkout of the orbiter sys¬ 
tems used during entry. The activities are performed approxi¬ 
mately 5-1/2 hours before deorbit and take about 15 minutes. 
The system checkout is performed in two parts. The first part 
contains tests requiring the APU/hydraulic systems, the flight 
control system repositioning of the left and right main engines 
for entry, and cycling the aerosurfaces, hydraulic motors, and 
hydraulic switching valves. After the checkout, the APU’s are 
deactivated. The second part consists of a check of all the flight 
crew dedicated displays; self-test of the microwave scan beam 
landing system, TACAN, accelerometer assemblies, radar 
altimeter, rate gyro assemblies, and air data transducer assem¬ 
blies; and check of the flight crew controllers, rotation hand 
control, rudder pedal transducer assembly, speedbrake, trim 
switch-panel, rotation hand control trim switches, speedbrake 
takeover button, and mode/sequence pushbutton indicators. 


DEORBIT. Deorbit guidance, navigation, and flight control 
software, through the transition DAP, provides maneuvering of 
the spacecraft to the OMS-1 and OMS-2 ignition attitude, OMS 
thrusting commands, OMS engine gimbaling for thrust vector 
control, and RCS thrusting commands in conjunction with the 
use of the orbital DAP control panels similar to orbit insertion. 
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Start Maneuver 
Select Engines 
Load Guidance Target 
Initiate Guidance 
Maneuver to Burn Attitude 
Ignite OMS 
Cut Off OMS 
Trim Velocity 



Deorbit Sequence 


The deorbit sequence reduces orbital velocity so that the 
orbiter enters the atmosphere for landing. The deorbit thrusting 
is nominally with two OMS engines and must establish the proper 
entry velocity and range conditions. It is possible to downmode 
to one OMS engine or plus X aft RCS jets for deorbit. The 
orbiter is positioned to a retrograde, tail-first thrusting attitude 
for deorbit. 

Before deorbit, the flight crew manually orients the space¬ 
craft to point the spacecraft negative Z axis at the sun. Approxi¬ 
mately two hours before deorbit, the ECLSS high-load flash 
evaporator is activated for cooling of the Freon-21 coolant loops 
as the ECLSS radiators are deactivated and the payload bay 
doors are closed. The high-load flash evaporator cools the 
ECLSS Freon-21 coolant loops until the ECLSS ammonia boilers 


are activated by the computers at approximately 42,672 meters 
(140,000 feet) altitude during entry. The orbiter IMU’s are 
aligned, the star trackers deactivated, and the star tracker doors 
closed. At about one hour before deorbit (in the initial develop¬ 
ment flights), the flight crew takes their seats and dons helmets. 
The spacecraft is then manually maneuvered utilizing the RCS 
jets to the deorbit attitude (retrograde). About 30 minutes 
before deorbit, the OMS preparations for the deorbit thrusting 
are accomplished. They consist of OMS thrust vector control 
gimbal checks, OMS system data checks, landing gear hydraulics, 
and APU reactivation (they remain operating throughout entry 
and landing rollout). The OMS deorbit thrusting consists of 
two OMS thrusting periods. At the completion of the thrusting, 
the flight crew manually maneuvers the spacecraft to orient the 
nose first for the entry sequence utilizing the RCS jets. The 
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spacecraft hydraulic fluid system thermal conditioning also 
begins, if required. 

ENTRY THROUGH LANDING. Guidance, navigation, and 
flight control software for the entry phase is initiated by the 
flight crew approximately five minutes before entry interface 
(El), and the DAP processes the flight control laws in response 
to automatic or manual commands and feedback sensor signals 
that indicate the dynamic state of the spacecraft. The entry 
interface is the point at which aerodynamic forces are sensed. 

RCS jets (pitch, roll, and yaw) are commanded and actuators 
for aerosurfaces (elevons, body flap, rudder/speedbrake) are com¬ 
manded once sufficient aerodynamic pressure is sensed on the 
surface to accomplish acceleration, rate, and attitude response. 
Commands would include turn control, stability augmentation, 
aerodynamic load relief, load limiting, and ground landing roll¬ 
out control. The flight control system normally would be in an 
automatic mode with the flight crew primarily monitoring the 
operation and performance of the GN&C systems. 

El is at about 121,920 meters (400,000 feet) altitude, 
approximately 4400 nautical miles (5063 statute miles) from the 
landing site, and at approximately 7620 meters per second 
(25,000 feet per second) velocity. It continues to entry-TAEM 
(terminal area energy management) interface. The fundamental 
guidance requirement during entry is to reach the TAEM inter¬ 
face at approximately 25,298 meters (83,000 feet) altitude, 
762 meters per second (2500 feet per second) velocity, and on 
range 52 nautical miles (59 statute miles) from the landing run¬ 
way and at a time interval between 34:45 minutes and 5:32 min¬ 
utes before landing within a few degrees of tangency with the 
nearest heading alignment cylinder (HAC). 

Before El, at approximately 134,000 meters (440,000 feet) 
altitude, the spacecraft enters into a communications blackout. 


Altitude 



Entry Right Profile 


This lasts until an altitude of approximately 54,800 meters 
(180,000 feet). Between these altitudes, heat is generated as the 
spacecraft enters into the atmosphere, which ionizes atoms of air, 
which form a layer of ionized gas particles around the spacecraft. 
During this period, radio signals between the spacecraft and 
ground cannot penetrate this sheath of ionized particles, and 
radio communications is blocked for approximately 20 minutes. 

A pre-entry phase begins at 121,920 meters (400,000 feet) 
altitude in which the spacecraft is maneuvered to zero degrees 
roll and yaw (wings level) and a predetermined angle of attack 
for entry. In the initial development flight tests, the angle of 
attack is 40°, in subsequent flights, it will be between 38° and 
28°. The flight control system issues the commands to the roll, 
yaw, and pitch RCS jets for rate damping in attitude hold for 
entry into the earth’s atmosphere until 0.176 g is sensed which 
corresponds to a dynamic pressure of 517 millimeters of mercury 
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(mmHg) per meters squared (10 pounds per square foot), 
approximately the point where the aerosurfaces become active. 

The forward RCS jets are inhibited at 121,920 meters 
(400,000 feet) altitude. The aft RCS jets maneuver the space¬ 
craft until a dynamic pressure of 517 mmHg per meters squared 
(10 pounds per square foot) is sensed which is when the orbiter’s 
ailerons become effective and the aft RCS roll jets are deacti¬ 
vated. At a dynamic pressure of 1035 mmHg per meters squared 
(20 pounds per square foot), the orbiter’s elevators become 
effective and the aft RCS pitch jets are deactivated. The orbiter’s 
speedbrake is used below Mach 10 to induce a more positive 
downward elevator trim deflection. At Mach 3.5, the rudder 
becomes activated and the aft RCS yaw jets are deactivated at 
13,716 meters (45,000 feet). 



Left Pod 

Aft Reaction Jets 


Rudder/Speed Brake 


- ' Pod 
Reaction 
Jets 


Outboard 

Right 


Elevons 


Vernier 


Left Elevons 


Forward Reaction 
Jets 


Nose Whi 
Steering 


Inboard 


Body Flap 

Main Engine 
Gimbals 


Flight Control Hardware Effector Elements 


In the entry phase, the RCS commands roll, pitch, and yaw. 
Lights on the commander’s flight deck display and control panel 
station are used to indicate the presence of an RCS command 
from the flight control system to the RCS jet selection logic; 
however, this does not indicate an actual RCS jet thrusting 
command. The minimum light-on duration is extended to allow 
the light to be seen even for minimum-impulse RCS jet thrusting 
commands. After the roll and pitch aft RCS jets are deactivated, 
the roll indicator lights are used to show that three or more yaw 
RCS jets have been requested. The pitch indicator lights are used 
to show elevon rate saturation. 

Entry guidance must dissipate the tremendous amount of 
energy the orbiter possesses when it enters the earth’s atmos¬ 
phere ensuring the orbiter does not burn up (entry angle too 
steep) or skip out of the atmosphere (entry angle too shallow) 
and at TAEM interface the orbiter is capable of reaching the 
desired touchdown point. 

During entry, energy is dissipated by the atmospheric drag 
on the orbiter’s surface. Higher atmospheric drag levels enable 
faster energy dissipation with a steeper trajectory. Normally, the 
angle of attack and roll angle enable the atmospheric drag of any 
flight vehicle to be controlled. However, for the orbiter, angle of 
attack was rejected because it creates surface temperatures above 
the design specification. The angle of attack schedule used dur¬ 
ing entry is initialized-loaded as a function of relative velocity 
leaving roll angle for energy control. Increasing the roll angle 
decreases the vertical component of lift, causing a higher sink 
rate and energy dissipation rate. Increasing the roll rate does 
raise the surface temperature of the orbiter, but not nearly as 
drastically as an equal angle of attack command. 

If the orbiter is low on energy (current range-to-go much 
greater than nominal at current velocity) entry guidance will 
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command lower than nominal drag levels. If the orbiter has too 
much energy (current range-to-go much less than nominal at the 
current velocity) entry guidance will command higher than 
nominal drag levels to dissipate the extra energy. 

Roll angle is used to control crossrange. Azimuth error is 
the angle between the plane containing the orbiter’s position 
vector and the heading alignment cylinder tangency point and 
the plane containing the orbiter’s position vector and velocity 
vector. When the azimuth error exceeds an initialized-loaded 
number, the orbiter’s roll angle is reversed. 

Thus descent, rate and down ranging are controlled by bank 
angles, the steeper the bank angle, the greater the descent rate 
and the greater the drag, conversely the minimum drag altitude 
is wings level. Cross-range is controlled by bank reversals. 

The entry thermal control phase is designed to keep the 
backface temperatures within the design limits. A constant 
heating rate is established until below 5791 meters per second 
(19,000 feet per second). 

The equilibrium glide phase transitions the orbiter from the 
rapidly increasing drag levels of the temperature control phase to 
the constant drag level of the constant drag phase. The equilib¬ 
rium glide flight is defined as flight in which the flight path 
angle, the angle between the local horizontal and the local 
velocity vector, remains constant. Equilibrium glide flight pro¬ 
vides the maximum downrange capability. It lasts until the drag 
acceleration reaches 33 ft/second squared. 

The constant drag phase begins at 33 ft/second squared. In 
the initial development flight the angle of attack is initially 
40 degrees but it begins to ramp down in this phase to approxi¬ 
mately 36 degrees by the end of this phase. 


The transition phase is where the angle of attack continues 
to ramp down, reaching the approximate 14 degree angle of 
attack at the entry TAEM interface, approximately 25,298 
meters (83,000 feet) altitude, 762 meters per second (2500 feet 
per second), Mach 2.5 and 52 nautical miles (59 statute miles) 
from the landing runway. Control is then transferred to TAEM 
guidance. 

It is noted, that during the aforementioned entry phases, 
the orbiter’s roll commands keep the orbiter on the drag profile 
and control cross range. 

Terminal area energy management guidance in entry begins 
at approximately 25,298 meters (83,000 feet) altitude and 
762 meters per second (2500 feet per second) and terminates at 
the A/L (approach and landing) guidance phase capture zone, 
which begins at approximately 3048 meters (10,000 feet) alti¬ 
tude, at Mach 0.9. The spacecraft attains subsonic velocity at 
approximately 14,935 meters (49,000 feet) at a range of over 
22 nautical miles (25 statute miles) from the landing site. 

TAEM guidance steers the orbiter to the nearest of two 
heading alignment cylinders whose radius are 5486 meters 
(18,000 feet), which are located tangent to and on either side of 
the runway centerline on the approach end. In TAEM guidance, 
excess energy is dissipated with an S turn and the speedbrake can 
be utilized to modify drag, L/D (lift/drag) ratio, and the flight 
path angle in high energy conditions. This increases the ground 
track range as the orbiter turns away from the nearest HAC until 
sufficient energy is dissipated to allow a normal A/L guidance 
phase capture, which begins at 3048 meters (10,000 feet) alti¬ 
tude at the nominal entry point (NEP). The orbiter also can be 
flown near the velocity for maximum lift over drag or wings level 
for the range stretch case, which moves the A/L guidance phase 
to the MEP (minimum entry point). 
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Entry Flight Profile 
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At TAEM acquisition, the orbiter is turned until it is aimed 
at a point tangent to the nearest HAC and continues until it 
reaches the point, WP-1 (waypoint one). At WP-1, the TAEM 
heading alignment phase begins in which the HAC is followed 


until landing runway alignment plus or minus 20 degrees has 
been achieved. 


In the TAEM prefinal phase, the orbiter leaves the HAC, 
pitches down to acquire the steep glide slope, increases airspeed, 
and banks to acquire the runway centerline and continues until 
on the runway centerline, on the outer glide slope and on 
airspeed. 

The A/L guidance phase begins with the completion of the 
TAEM prefinal phase and ends when the craft comes to a com¬ 
plete stop on the runway. The A/L interface airspeed require¬ 
ment at 3048 meters (10,000 feet) altitude is 290 plus or minus 
12 knots, equivalent airspeed (EAS), 6.9 nautical miles (7.9 
statute miles) from touchdown. 


Alternate Flight Paths 
Through Approach 
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Autoland Profile 


Autoland guidance is initiated at this point to guide the 
orbiter to the minus 20° glide slope (which is over seven times 
that of a commercial airliner’s approach) aimed at a target 
approximately 0.86 nautical mile (one statute mile) in front of 
the runway. The descent rate in the later portion of TAEM and 
A/L is greater than 3048 meters per minute (10,000 feet per 
minute—approximately 20 times higher rate of descent than a 
commercial airliner’s standard three-degree instrument approach 
angle). The steep glide slope is tracked in azimuth and elevation 
and the speedbrake is positioned as required. 

At 533 meters (1750 feet) above ground level a pre-flare 
maneuver is started to position the spacecraft for a 1.5° glide 
slope in preparation for landing with the speedbrake positioned 
as required. The flight crew deploys the landing gear at this 
point. 


» 



The final phase reduces the sink rate of the vehicle to less 
than 2.7 meters per second (9 feet per second). After the space¬ 
craft crosses the runway threshold—WP-2 in the Autoland mode 
navigation uses the radar altimeter vertical component of posi¬ 
tion in the state vector for guidance and navigation computations, 
this is from an altitude of 30 meters (100 feet) to touchdown. 
Touchdown occurs approximately 762 meters (2500 feet) past 
the runway threshold at a speed of 184 to 196 knots (213 to 
226 mph). 

In the automatic mode, the orbiter is essentially like a 
missile; the flight crew monitors the instruments to verify that 
the vehicle is following the correct trajectory. The onboard 
computers execute the flight control laws (equations). If the 
vehicle diverges from the trajectory, the flight crew can take over 
at any time by switching to CSS. The orbiter can fly to a landing 
in the automatic mode (only landing gear extension and braking 
action on the runway are required by the flight crew); however, 
in the initial development flight tests, the automatic mode is used 
in entry until 9,756 meters (32,000 feet) altitude, and the flight 
crew will then select CSS for the remainder of the flight. In the 
subsequent flights, the automatic mode will be utilized for the 
entire entry through landing rollout. 

The navigation system used from entry to landing consists 
of the IMU’s and navigation aids (TACAN, air data system, 
MSBLS, and radar altimeter). The three IMU’s maintain an 
inertial reference and provide delta velocities until MSBLS is 
acquired. 

Navigation-derived air data-obtained after deployment of 
the two air data probes below Mach 3—is needed from entry 
through landing as inputs to the guidance, flight control, and 
crew display. TACAN provides range and bearing measurements 
and is available at approximately 44,196 meters (145,000 feet) 
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altitude and will nominally accept the data into the state vector 
before 39,624 meters (130,000 feet) altitude. TACAN is used 
until MSBLS acquisition which provides range, azimuth, and 
elevation and is expected to occur at approximately 5,486 meters 
(18,000 feet) altitude. Radar altimeter data is available at 
approximately 2743 meters (9000 feet). 

TACAN acquisition and operation is completely automatic. 
The crew is provided with the necessary controls and displays to 
evaluate the TACAN system performance and to take over if 
required. When the distance to the landing site is approximately 
120 nautical miles (138 statute miles), the TACAN begins the 
navigation region of interrogating six navigation stations. As the 
spacecraft progresses, the distance to the remaining stations and 
the next nearest station is computed and the next nearest station 
will be selected automatically when the spacecraft is closer to it 
than it is to the previous locked-on station. Only one station is 
interrogated when the distance to the landing site is less than 
approximately 20 nautical miles (23 statute miles). Again, the 
TACAN’s will automatically switch from the last locked-on 
navigation region station to begin searching for the landing site 
station. TACAN azimuth and range are provided on the CRT 
horizontal situation display. TACAN range and bearing cannot 
be used to produce a good estimate of the altitude position 
component, so navigation uses barometric altitude derived from 
the air data system probes. 

MSBLS acquisition and operation is completely automatic; 
the flight crew provided with controls and displays to evaluate 
system performance and to take over if required. MSBLS 
acquisition is expected to occur at approximately 5,486 meters 
(18,000 feet) and approximately eight nautical miles (9.2 statute 
miles) from the runway. The range and azimuth measurements 
are provided by a ground antenna located at the end of the 
runway and to the left of the runway centerline. Elevation 
measurements are provided by a ground antenna to the left of 



the runway centerline approximately 800 meters (2624 feet) 
from the runway threshold. 

During entry, the commander and pilot ADI s (attitude 
director indicators) becomes a two-axis ball displaying body roll 
and pitch attitudes with respect to local vertical/local horizontal. 
These are generated in the attitude processor from IMU data. 
The roll and pitch error needles each display the body roll and 
pitch attitude error with respect to entry guidance commands by 
using the bank guidance error and the angle-of-attack error gen¬ 
erated from the accelerometer assemblies. In atmospheric flight, 
the roll attitude error and the normal acceleration error are dis¬ 
played on the roll and pitch error needles, respectively. The side¬ 
slip angle is displayed on the yaw error needle. The roll and 
pitch rate needles display stability roll and body rates by using 
stability roll rate, rate gyro rate, and pitch rate. The yaw rate 
needle displays stability yaw rate. After main landing gear 
touchdown, the yaw error with respect to runway centerline and 
nose gear slapdown pitch rate error are displayed on the roll and 
pitch error needles. During rollout, the pitch error indicator 
indicates pitch error rate. 

During entry, the commander and pilot HSI’s (horizontal 
situation indicators) display a pictorial view of the spacecraft’s 
location with respect to various navigation points. During entry, 
navigation attitude processor provides the inputs to the HSI until 
after leaving the communications blackout at approximately 
44,196 meters (145,000 feet) altitude. Then TACAN is acquired 
and accepted for HSI inputs at approximately 39,624 meters 
(130,000 feet) altitude until MSBLS acquisition at approximately 
5,486 meters (18,000 feet), and approximately 8 nautical miles 
(9.2 statute miles) from the runway. 

When the approach mode and MLS source are selected for 
the commander and pilot HSI, data from the microwave scan 
beam landing system replaces TACAN data. MSBLS azimuth, 
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elevation, and range are used from acquisition until runway 
threshold is reached and azimuth and range are used to control 
rollout. 

At an altitude of 2743 meters (9000 feet), radar altitude 
one or two can be selected to measure the nearest terrain within 
the beamwidth of the altimeters. They provide this indication 
to the AVVI radar, altitude, meter display from 5000 feet to 0. 

Below Mach 3, the left and right air data system probes are 
deployed by the flight crew. This sytem senses air pressures 
related to the spacecraft movement through the atmosphere for 
updating the navigation state vector in altitude, guidance in 
steering and speed-brake command calculations, flight control for 
control law computations, and for display on the AMI’s (alpha 
Mach indicators) and AVVI’s (altitude, vertical velocity 
indicators). 

The AMI’s display essential flight parameters relative to the 
spacecraft’s travel in the air mass such as angle of attack, (alpha), 
acceleration, Mach/velocity, and knots equivalent airspeed. The 
source of data during the AMI’s is determined by the position of 
the air data select switch. Prior to air data system probe deploy¬ 
ment, the AMI’s receive their inputs from the navigation altitude 
processor. When the air data probes are deployed, the left or 
right air data system provides the inputs to the AMI’s except for 
the acceleration indicator, which remains on the navigation 
attitude processor. 

The AVVI’s display radar altitude, barometric altitude, 
altitude rate, and altitude acceleration. The data driving the 
AVVI’s is determined by the air data select switch. When the air 
data probes are deployed, the right or left air data system pro¬ 
vides the inputs to the AVVI’s, except for the altitude accelera¬ 
tion indicator, which remains on the navigation attitude proces¬ 


sor, and the radar altitude, which are not operational until the 
orbiter descends to 1524 meters (5000 feet). 


The three CRT’s on the flight deck are used during entry to 
display entry trajectories, horizontal situation displays, guidance 
navigation, and control systems summaries. 

When the orbiter is in atmospheric flight, it is flown by 
varying the forces it generates while moving through the 
atmosphere like any other aerodynamic vehicle. The forces 
are determined primarily by the speed and direction of the 
relative wind (the airstream is seen from the vehicle). The speed 
of the airstream is described as Mach number. The direction of 
the airspeed is described by the difference between the direction 
the vehicle is pointing (attitude) and the direction it is moving 
(velocity). It may be broken into two components—angle of 
attack (vertical component) and sideslip angle (horizontal 
component). 

To rotate the orbiter in the atmosphere, aerodynamic 
control surfaces are deflected into the airstream. The orbiter has 
seven aerodynamic control surfaces. Four of these are on the 
trailing edge of the wing (two per wing) and are called elevons 
since they combine the effects of elevators and ailerons on 
ordinary airplanes. Deflecting the elevons up or down causes the 
vehicle to pitch up or down. If the right elevons are deflected 
up, while the left elevons are deflected down, the orbiter will roll 
to the right—that is, the right wing will fall while the left wing 
rises. The fifth control surface is the body flap, which is located 
on the rear lower portion of the aft fuselage and provides thermal 
protection for the three main engines during entry. During 
atmospheric flight, it provides pitch trim to reduce elevon 
deflections. The sixth and seventh control surfaces are the 
rudder/speed brake panels located on the aft portion of the 
vertical stabilizer. When both panels are deflected right or left, 
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Relative Velocity (VR) 20K to 26K 
Range (R) 1000 to 4000 nautical miles 



Command 

Entry Trajectory 
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Horizontal Situation Display 
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Altitude - 30,000 to 9000 Meters (10,000 to 30,000 ft) 
Range - 70 to 10 Nautical Miles 

Q Limit Line (300 knots EAS) 
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Rudder/Speed Brake - 2 Vertical Panels 
•Yaw control when both panels 
deflected left or right (rudder 
function) 

•Aerodynamic drag control when panels 
opened (away from each other) or 
closed (toward each other) (speed brake 
function) 



Left Inboard and 
Outboard Elevons 


Right Inboard and Outboard Elevons 

• Pitch control when deflected same 
direction as left elevons (elevator 
function) 

• Roll control when deflected opposite 
direction of left elevons (aileron 
function) 

• Inboard and outnoard deflected 
identically during entry 


Body Flap 

• Main engine thermal protection 

• Pitch trim to reduce elevon deflections 


Aerodynamic Surfaces 


the spacecraft will yaw, moving the spacecraft nose right or left, 
thus acting as a rudder. If the panels are opened at the trailing 
edge, aerodynamic drag force increases and the spacecraft slows 
down. Thus, the opening of the panels is called a speed brake for 
speed control. 

On the flight deck display and control panel, between the 
commander and pilot stations, are the surface position indicators 
which display the position of each aerodynamic control surface. 
The positions of the aerodynamic surfaces are displayed on 
moving pointer displays. Elevon positions are shown in degrees 
from plus 20 , full down, to minus 35°, full up. Body flap 


position is 0 to 100 percent. Rudder position is left 30°, right 
30°. Aileron position is left 5°, right 5°. Speed brake position 
and command are 0 to 100 percent. An off flag is provided in 
each indicator to indicate power loss, erroneous input signals, or 
failure in any display channel. 

The commander and pilot can select the flight control sys¬ 
tem modes of operation with pushbutton light indicators on the 
flight deck display and control glareshield/eyebrow panel. There 
are two modes automatic and CSS (control stick steering). The 
flight crew can select separate modes for pitch and roll/yaw (roll 
and yaw must be in the same mode). The body flap and speed 
brake have an automatic and manual mode selection. Each 
pushbutton is a triple redundant, momentary contact, non¬ 
latching switch. 
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Automatic pitch or automatic roll/yaw are selected by 
depressing the applicable pushbutton at either the commander or 
pilot station. When depressed, that pushbutton will illuminate at 
both stations. Automatic pitch provides automatic control in the 
pitch axis and the automatic roll/yaw provides automatic control 
in the roll/yaw axes. During entry, the automatic mode uses the 
RCS jets while dynamic pressure permits the aerosurfaces to 
become effective; the aft RCS jets and spacecraft aerosurfaces are 
then used together until dynamic pressure becomes sufficient for 
aerosurface control only. 

Control in the pitch axis is provided by the elevons, speed 
brake, and body flap. The elevons provide control to guidance 
normal acceleration commands, control of pitch rate during 
slapdown (landing) for nose wheel load protection, and static 
load relief after slapdown for main landing gear wheel and tire 
load protection. The speed brake provides control to guidance 
surface deflection (open/close, increase/decrease velocity) 
command. The body flap provides control to null elevon deflec¬ 
tion. Pushbuttons at the commander and pilot flight deck 
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display and control eyebrow panel illuminate to indicate auto¬ 
matic speed brake or body flap control. 

Control in the roll and yaw axes is provided by the elevons 
and rudder. The elevons provide control to guidance bank angle 
command during TAEM and autoland and control to guidance 
wings-level command during flat turns 1.5 meters (5 feet) above 
touchdown. The rudder provides yaw stabilization during TAEM 
and autoland and control to guidance yaw rate command during 
flat turn and subsequent phases. 

The three rate gyro assemblies of the flight control system 
measure and supply output data proportional to the orbiter's 
attitude rates about its three body axes. The three accelerometer 
assemblies of the flight control system measure and supply 
output data proportional to the orbiter’s normal (vertical) and 
lateral (right/left) accelerations. The three rate gyro assemblies 
and three accelerometer assemblies are used in the flight control 
system for stability augmentation because of the orbiter’s 
marginal stability in its pitch and yaw axes at subsonic speeds. 

The three IMU’s are an all-attitude stabilized platform that 
also measures and supplies output data proportional to the 
spacecraft’s attitude (rotation) and acceleration (velocity). The 
three IMU’s augment the flight control system’s rate gyro 
assemblies and accelerometer assemblies. 


The rate gyro assembly pitch rate (rotation) and the 
accelerometer assembly normal acceleration (velocity) are used 
to generate elevon (elevator) deflection commands. The rate 
gyro assembly yaw rate (rotation) and the accelerometer assem¬ 
bly lateral acceleration generate the rudder deflection required 
for directional stability. The rate gyro assembly roll rate 
(rotation) generates the elevon (aileron) deflection command 
required for lateral (roll) stability. The speed brake and body 


flap positions generate the elevon deflection required for trim 
near neutral to maximize roll effectiveness of the elevons. 

When the orbiter is in the automatic pitch and roll vaw 
mode, the flight crew manual control stick steering commands 
are inhibited. In the CSS mode, the crew flies the orbiter by 
deflecting the RHC and rudder pedals. The flight control system 
interprets the RHC motions as rate commands in pitch, roll, or 
yaw and controls the RCS jets and aerosurfaces. The larger the 
deflection, the larger the command. The flight control system 
compares these commands with inputs from rate gyros and 
accelerometers (what the vehicle is actually doing—motion 
sensors) and generates control signals to produce the desired 
rates. If the flight crew releases the RHC. it will return to center, 
and the orbiter will maintain its present attitude (zero rates). 
The rudder pedals position the rudder during atmospheric flight; 
however, in actual use. because flight control software performs 
automatic turn coordination, the rudder pedals are not used until 
the wings are leveled prior to touchdown. 

The CSS mode is similar to the automatic mode except the 
flight crew can issue three-axis commands affecting spacecraft 
motion. They are augmented by the feedback from the same 
spacecraft motion sensors, except for the normal acceleration 
(velocity) accelerometer assemblies, to enhance control response 
and stability. CSS pitch or roll/yaw modes are selected by 
depressing a pushbutton at either the commander or pilots 
station. When depressed, that PBI will illuminate to show CSS 
control in that axis. 

When the orbiter is in the CSS mode, flight crew inputs are 
provided by the commander or pilot RHC. The RHC commands 
are processed by the computers together with data from the 
motion sensors. The flight control module processes the flight 
control laws and provides commands to the flight control system, 
which positions the aerosurfaces in atmospheric flight. 
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Control in the roll/yaw axis is provided by the elevon 
(ailerons) and the rudder. The elevons provide augmented con¬ 
trol to the RHC control. The rudder interface between the roll/ 
yaw channel automatically positions the rudder for coordinated 
turns. A rudder pedal transducer assembly (RPTA) is provided at 
the commander and pilot’s stations. The two rudder pedal 
assemblies are connected to their respective RPTA’s. Because of 
the roll/yaw interface, rudder pedal use should not be required 
until just before touchdown. An artificial feel is provided in the 
rudder pedal assemblies. The RPTA commands are processed by 
the computers and the flight control module commands the 
flight control system to position the rudder. 


Electronics 



Rudder Pedal Transducer Assembly 


In the CSS mode the command and pilot’s RHC trim 
switch, in conjunction with the TRIM ENABLE/INHIBIT switch, 
activates or inhibits the RHC trim switch. When the RHC trim 
switch positioned forward or aft adds a trim rate to the RHC 
pitch command, positioning it left or right adds a roll trim. 
Redundancy management processes the two contacts in each 
position and enables or inhibits the use of the RHC trim in the 
flight control system software. 


The GAIN ENA (enable) pitch and roll/yaw pushbuttons at 
the commander and pilot’s stations are used only in the CSS 
mode. It is intended for use as a last resort only because of 
degradation of off-nominal flight conditions such as bending, 
instabilities, large aerodynamic coefficient errors, and angle-of- 
attack errors. Depressing the CSS pushbutton restores nominal 
gain structure in that axis. 


Aerosurface servo amplifier’s (ASA’s) are electronic devices 
that receive the aerosurface commands during atmospheric flight 
from the flight control system software and electrically position 
hydraulic valves in the aerosurface actuators which cause the 
deflections. The ASA’s receive position feedback from the 
aerosurface, which is summed with the position command to 
provide a servo loop closure for one of the four independent 
servo loops associated with the elevons, rudder, and speed brake. 
The body flap utilizes three servo loops. The path from an ASA 
to its servovalve in the actuators and the feedback sensor to an 
ASA is called a flight control channel; thus there are four flight 
control channels. The four ASA’s are located in avionics bays 4, 
5, and 6 in the orbiter aft fuselage. Each ASA is mounted on a 
coldplate and cooled by the Freon-21 coolant loops. Each ASA 
is 508 millimeters (20 inches) long, 162 millimeters (6.4 inches) 
high and 228 millimeters (9 inches) wide. Each weighs 13.69 
kilograms (30.2 pounds). 
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Aerosurface Servoamplifier 


Each of the four elevons, located on the trailing edge of the 
wings, has a servoactuator that positions it. Each servoactuator is 
supplied with hydraulic pressure from the three orbiter hydraulic 
systems. A switching valve controls which hydraulic system 
becomes the source of hydraulic pressure for that servoactuator. 
The valve allows a primary source of pressure (PI) to be supplied 
to that servoactuator. If the primary hydraulic pressure source 
fails, the switching valve allows the first standby hydraulic 
pressure (P2) to supply that servoactuator. Failure means a 
decrease of pressure between 77,625 mmHg (1500 psi) and 
62,100 mmHg (1200 psi). If the first standby hydraulic source 
pressure fails, then the secondary standby hydraulic source 
pressure (P3) is supplied to that servoactuator. With two 
hydraulic system failures, the third hydraulic system will provide 
sufficient hydraulic pressure to operate all aerosurface actuators 
at a reduced rate. The yellow HYD PRESS caution/waming light 
would illuminate on the flight deck crew and display panel to 
indicate a hydraulic system failure. 
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Each elevon servoactuator receives four command signals, 
one from each of the four ASA’s. Each servo channel consists of 
a two-stage servovalve that drives a modulating piston. Each of 
the four modulating pistons is summed on a common shaft, 
creating a force on the mechanical shaft to position a power 
spool that controls the flow of hydraulic fluid to the actuator 
power ram, controlling the direction of ram movement and thus 
the elevon to the desired position. When the desired position is 
reached, the power spool positions the mechanical shaft to block 
the hydraulic pressure to the hydraulically operated ram, locking 
the ram at that position. If a malfunction occurs in one of the 
four servo control channels of a servoactuator, the pressure 
across the modulating piston will differ (delta pressure) from 
those of the other three servo channels. The pressure difference 
is sensed by a primary linear differential pressure transducer 
across the modulating piston, which causes the corresponding 
ASA to signal a solenoid isolation valve. It removes hydraulic 
pressure from the failed channel and bypasses it when the 
respective FCS CHANNEL switch on the flight deck display and 
control panel is in AUTO. This automatic function prevents 
excessive transient motion to that aerosurface. Such motion 
could result in loss of the orbiter due to manual redundancy 
being too slow. 

The four FCS CHANNEL switches control the ASA 
channels. The switch for each channel controls that channel for 
the elevons, rudder/speed brake, and body flap, except for 
channel 4, which has no body flap commands. When an RCS 
channel switch is positioned to OVERRIDE, it resets the channel 
that was bypassed in the automatic mode. The FCS channel 
switch OFF position bypasses that channel. 

The FCS CHANNEL yellow caution/warning light will 
illuminate on the flight deck display and control panel to inform 
the flight crew of a failed channel. The red FCS SATURATION 
caution/warning light on the flight deck display and control 


) 


) 


panel will illuminate if one of the four elevons is greater than 
plus 15 degrees or less than minus 20 degrees. 

In each elevon servoactuator ram, there are four linear ram 
position transducers and four linear ram secondary differential 
pressure transducers. The ram linear transducers provide position 
feedback to the corresponding servo loop in the ASA which is 
summed with the position command to close the servo loop. 
These are summed with the elevon ram linear secondary differ¬ 
ential pressures which develop an electro-hydraulic valve drive 
current proportional to the error signal to position the ram. The 
maximum elevon deflection rate is 20 degrees per second. 


The rudder/speed brake is located on the trailing edge of the 497 

orbiter’s vertical stabilizer. The rudder/speed consists of upper 
and lower segments. One servoactuator positions both segments 
together as a rudder. Another servoactuator opens the segments 
at the flared end of the rudder to function as a speed brake. 


The rudder and speed brake servoactuator receives four 
command signals from the four ASA’s. Each of the four servo 
channels consists of a two-stage servovalve which functions 
similar to that of the elevons. The exception is that the power 
spool for the rudder controls the flow of hydraulic fluid to three 
rudder reversible hydraulic motors, and the power spool for the 
speed brake controls the flow of hydraulic fluid in the three 
speed brake hydraulic reversible motors. Each rudder hydraulic 
motor receives hydraulic pressure from only one of the orbiter’s 
hydraulic systems and each speed brake hydraulic motor receives 
hydraulic pressure from only one of the orbiter’s hydraulic 
systems. Each hydraulic motor has a hydraulic brake. When the 
motor is supplied with hydraulic pressure, the motor’s brake is 
released. When the hydraulic pressure is blocked to that 
hydraulic motor, the hydraulic brake is applied holding that 
motor and the corresponding aerosurface at that position. 
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The three hydraulic motors provide the output to the 
rudder differential gearbox. The gearbox is connected to a mixer 
gearbox, which drives rotary shafts, which drive four rotary 
actuators, which position the rudder segments for rudder 
position. 

The three speed brake hydraulic motors provide the power 
output to the speed brake differential gearbox. The differential 
gearbox is connected to the same mixer gearbox as that of the 
rudder, which drives rotary shafts, which drive the same four 
rotary actuators involved with the rudder. Within each of the 
four rotary actuators, are planetary gears which provide the 
blend of positioning the rudder and opening the rudder flared 
ends. 


There are four rotary position transducers on the rudder 
differential gearbox output and one differential linear position 
transducer in each rudder servoactuator. The rotary position 
transducers provide position feedback to the corresponding servo 
loop in the ASA. The feedback is summed with the linear 
differential pressures that develop the electro-hydraulic valve 
drive current proportional to the error signal to position the 
rudder. 

There are also four rotary position transducers on the speed 
brake differential gearbox output and one differential linear 
pressure transducer in each speed brake servoactuator. The 
rotary position transducers provide position feedback to the cor¬ 
responding servo loop in the ASA. It is summed with the posi¬ 
tion command to close the servo loop. These are summed with 
the linear differential pressures that develop the electro-hydraulic 
valve drive current proportional to the error signal to position the 
speed brake. 

If a malfunction occurs in one of the four rudder servo¬ 
actuator channels or one of the four speed brake servo¬ 


actuator channels, the corresponding linear differential pressure 
transducer will cause the corresponding ASA to signal a solenoid 
isolation valve, which removes pressure from the failed channel 
and bypasses it, if that FCS channel switch is in AUTO. The FCS 
channel switch override and off position functions the same as 
for the elevons and the FCS channel caution/warning light. The 
HYD PRESS caution/waming light will indicate a hydraulic 
failure. The rudder deflection rate is a maximum of 14 degrees 
per second. The speed brake deflection rate is approximately 10 
degrees per second. If two of the three hydraulic motors fail in 
the rudder or speed brake, the corresponding deflection rate is 
reduced approximately 50 percent. 

Three servoactuators at the lower aft end of the fuselage are 
used to position the body flap. Each is supplied with hydraulic 
pressure from an orbiter hydraulic system. Each has a solenoid- 
operated enable valve controlled by one of the three ASA’s (the 
fourth ASA is not used for the body flap commands). Each 
solenoid-operated enable valve supplies hydraulic pressure from 
one orbiter hydraulic system to a corresponding solenoid- 
operated pilot valve. Each pilot valve is controlled by one of the 
three ASA’s. When the individual pilot valve receives a command 
signal from its corresponding ASA, it positions a common 
mechanical shaft in the control valve, which allows hydraulic 
pressure to be supplied to the hydraulic motors (normally one 
pilot valve is enabled and moves the other two). The hydraulic 
motors are reversible, allowing the body flap to be positioned up 
or down. The hydraulic brake associated with each hydraulic 
motor releases the hydraulic motor for rotation and, when the 
desired body flap position is reached, the control valves block the 
hydraulic pressure to the hydraulic motor and apply the 
hydraulic brake, holding that hydraulic motor at that position. 
Each hydraulic motor provides the power output to a differential 
gearbox, which drives a rotary shaft, and four rotary actuators, 
which position the body flap. The rotary position transducer 
associated with each rotary actuator provides position feedback 
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to the ASA’s; thus the fourth ASA is utilized for position 
feedback to the flight control system software. 

The ASA’s will isolate a body flap channel if FCS channel 
switches are in the automatic mode through the solenoid- 
operated enable valve if the corresponding solenoid-operated 
pilot valve malfunctions or the control valve associated with that 
pilot valve does not provide the proper response and allows the 
hydraulic pressure fluid to recirculate. The FCS channel switches 
and FCS channel caution/warning light would function the same 
as for the elevons. If the hydraulic system associated with the 
hydraulic motor fails, the remaining two hydraulic motors will 
position the body flap and the HYD PRESS caution/waming 
light will illuminate. The body flap deflection rate is approxi¬ 
mately 4.5 degrees per second. 


Manual control (CSS mode) in the pitch axis is provided by 
elevons, speed brake, and body flap. The elevons provide 
augmented control through the RHC pitch command. The speed 
brake can be switched to its manual mode at either commander 
or pilot stations by depressing a takeover switch on the SBTC 
handle. The takeover switch, when depressed, illuminates the 
SPD BK/THROT MAN pushbutton at the station depressed. 
Manual speed brake control can be transferred from one station 
to the other by activating the takeover switch. When the SBTC is 
at its forward setting, the speed brake is closed. Rotating the 
handle aft positions the speed brake at the desired position 
(open) and holds it. To regain automatic speed brake control, the 
pushbutton on the panel is depressed again and the AUTO¬ 
MATIC (upper half) of the pushbutton will then be illuminated. 
In the manual mode, the speed brake commands are processed by 
the computers and the flight control module commands the 
flight control system to position the speed brake and hold it at 
the desired position. The body flap can be switched to its manual 
mode at the commander or pilot’s station by moving a toggle 


switch from AUTO/OFF to UP or DOWN for the desired body 
flap position. These are momentary switch positions: when 
released tire switch returns to off. The BODY FLAP MAN (lower 
half) indicator will illuminate to indicate manual control of the 
body flap. To regain automatic body flap control, the 
pushbutton must be depressed again. 

EVENT SEQUENCE LIGHTS. The five event sequence 
lights on the flight deck display and control eyebrow panel at the 
commander and pilot’s station indicate various event sequences 
during entry through landing. 

The left-most event light is a red light that will illuminate 
when the spacecraft normal acceleration reaches 2 g’s and will 
flash if the normal acceleration is 2.5 g’s and above. 

The second-most event light is an amber light. It will 
illuminate if the speed brake is out of the required position by 10 
percent or more between Mach 10 and 0.9, if the air data probes 
are not deployed between Mach 2.5 and 1, or the speed brake or 
body flap are out of position plus or minus 0.5 degree at or 
below 152 meters (500 feet). 

The third light from the left is not implemented on the 
initial development flight, but is on the subsequent flights. It is a 
green light and will illuminate when the spacecraft altitude is 
below the upper flare altitude limit of 838 meters (2750 feet) 
and the lower flare altitude of 533 meters (1750 feet). At the 
lower flare altitude, the light flashes for three seconds and then is 
turned off. 

The fourth light from the left is not implemented on the 
initial development flight but is on the subsequent flights. It is a 
red light and flashes when the spacecraft reaches gear-down 
altitude of 91 meters (300 feet) or below until all three landing 
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gear uplock signals are false (gear down and locked). It 
illuminates for ten seconds after it flashes. 

The right-most light is a green light and will flash for five 
seconds and remain on from any of the following events: the 
spacecraft is below 42,672 meters (140,000 feet) altitude and 
TACAN range, TACAN azimuth, or drag altitude data are lost; 
the spacecraft is below 25,908 meters (85,000 feet) down to the 
altitude at which Mach 0.75 [9753 meters (32,000 feet)] is 
reached and TACAN range or azimuth are lost; the spacecraft is 
below Mach 0.75 and TACAN range or azimuth, MLS range or 
azimuth (if acquired), barometric altitude, and radar altimeter 
below 152 meters (500 feet) altitude are invalid. 

ORB1TER VENT AND PURGE SYSTEM. The vent and 
purge system is controlled exclusively through software. There 
are no dedicated manual controls or displays oil the crew 
compartment flight deck display and control panel. 

The orbiter’s vent and purge system comprises 18 active 
ports and is divided into six groups: left and right ports one and 
two, left and right port three, left and right port five, left and 
right ports four and seven, left and right port six, and left and 
right ports eight and nine. 

All vent ports have a purge position with the exception of 
left and right vent ports three, four, five, and seven. 

The vent and purge system is used for equalizing the 
pressure across the outer surface of the orbiter and to permit 
molecular venting of orbiter cavities and insulation blankets to 
achieve the required low internal blanket pressure. The purge 
position must maintain a positive pressure in the orbiter’s 
payload bay area to prevent contamination and to vent any 
residue in the payload bay area while in the ground turnaround 
phase. 



Vent No.* 

Compartment Vented 

Vent Door Subsystem 

1 

Forward RCS 

Forward 

2 

Forward Fuselage 

7 

Wing 

Payload Bay 

and Wing 

4 

Mid Fuselage 

5 

Mid Fuselaqe 

Payload Bay 

3 

Mid Fuselage 

6 

Mid Fuselaqe 

8 

0MS Pod 

Aft 

9 

Aft Fuselage 


*LHand RH 


Orbiter Vent Doors 


502 


The sequencing of the active ports is by the software 
program in the onboard redundant set computers. The ports are 
cycled to open, close, or purge position as required in each 
mission phase. Positioning of the active ports is performed by the 
software based on mission time or mission events during ascent, 
entry, aborts, and by keyboard entry on the crew compartment 
flight deck display and control panel in orbit. Vent port status is 
displayed on the flight deck display and control panel CRT’s in 
orbit. 
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When a cue is received from the computer launch sequence 
to configure the vent ports to a launch configuration, vent ports 
one and two and eight and nine are commanded to the open 
position, and all other vent ports are closed. The status of the 
vent ports is transmitted to the computer launch sequence to 
determine that the vent ports have achieved the launch configura¬ 
tion within the specified time. The orbiter is launched with the 
vent ports in this configuration, and at T plus 10 seconds all vent 
doors are commanded open. In a nominal mission, the vent ports 
will remain open until the flight crew closes the ports with a 
keyboard entry on the flight deck display and control panel prior 
to deorbit. During entry, at approximately 24,384 meters 
(80,000 feet) altitude, the computers automatically open the 
fuselage vents. The vents should be fully open at 21,336 meters 
(70,000 feet) altitude and remain open until weight on the nose 
gear at landing, at which time they will go to purge. 

If, during the launch phase—T minus ten to T minus zero—a 
launch abort has occurred, the vent door system is reconfigured 
to the prelaunch configuration by the launch processing system. 

BACKUP FLIGHT CONTROL SYSTEM. The backup flight 
control (BFC) system is engaged by depressing the BFC switch 
located near the top of the commander or pilot’s RHC or by 
depressing the BFC pushbutton on the commander or pilot’s 
flight deck display and control eyebrow panel. The fifth 
computer is allocated as the backup flight control system in the 
initial development flights. It has a separate independent soft¬ 
ware design and coding activity to protect against generic 
software failures in the primary flight control system computer 
set. It also provides unique functions such as non-critical 
monitoring and payload command and monitoring. 

The BFC system is distinct from the primary flight system. 
The BFC system is used only in an extreme emergency. It 
utilizes control laws (equations) similar to the primary flight 


control system; however, it is a non-redundant mechanism. The 
BFC is constrained in a single-string flight control system to 
avoid generic problems that may exist with the primary 
computers or primary system software. It operates concurrently 
with the primary flight system, processing the same commands 
and sensor data; however, its output is inhibited. When engaged, 
the BFC system augments the CSS mode by using the 
commander’s RHC. Thus there is no manual thrust vector control 
or manual throttling capability during first- and second-stage 
ascent and, during atmospheric flight, the speedbrake would be 
positioned by using the SBTC and the body flap would be 
positioned manually. 

The software of the BFC system is processed only for the 
commander’s (left) side ADI, HSI, and RHC. The BFC system 
supplies attitude errors on the CRT trajectory display, whereas 
the primary flight system is supplying the attitude errors to the 
ADI’s when in primary flight control, however, when the BFC 
system is engaged, the errors on the CRT are blanked. 

The BFC can be disengaged by use of the BFC DISEN¬ 
GAGE switch at the commander’s station. It is used primarily for 
ground checkout. 

GN&C contractors are: Rockwell International, Autonetics 
Group, Anaheim, CA (driver module controller, master event 
sequence controller, backup flight control system); Ball Brothers 
Research, Boulder, CO (star tracker); Rockwell International, 
Collins Radio Group, Cedar Rapids, IA (display driver unit, 
horizontal situation indicator); Honeywell Inc., St. Petersburg, 
FL (flight control system displays and controls, rotation hand 
control, translation hand control, accelerometer assembly, rudder 
pedal transducer assembly, speed brake/thrust control, forward 
and aft reaction jet and OMS drivers, aerosurface servo amplifier, 
ascent thrust vector control amplifier), IBM Corp., Federal 
Systems Division, Electronics Systems Center, Owego, NY (mass 
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memory/multi-function cathode ray tube display unit, keyboard 
display electrical unit and general purpose computer-computer 
processor unit-input/output processor); Intermetrics Inc., 
Cambridge, MA (advance computer language, HAL/S, avionics 
software); Lear Siegler, Grand Rapids, MI (attitude direction 





indicator); Northrop Corp., Electronics Division, Norwood, MA 
(rate gyro assembly), Singer Kearfott, Little Falls, NJ (inertial 
measurement unit, multiplexer interface, adapter, data bus 
coupler, and data bus isolation amplifier). 


CAUTION /WARNING SYSTEM 


The primary caution and warning (C/W) system is designed 
to warn the crew of conditions that may adversely affect orbiter 
operations. The system consists of hardware and electronics that 
provide the crew with both visula and aural cues when a system 
exceeds set operating limits. 

The visual cues consist of four MASTER ALARM push¬ 
button light indicators (two on the forward display panels of the 
flight deck, one at the aft flight deck station, and one in the 
mid-deck), a 40-light array on the flight deck forward display 
panel, and a 120-light array on the aft panel. The aural cue 
consists of an alternating tone that oscillates between 375 and 
1000 Hertz and is sent to crew headsets and speaker boxes. 

Three additional aural cues are generated by the primary 
C/W system: a siren tone from the smoke detection system in the 
crew compartment, a klaxon alarm tone from the crew 
compartment delta pressure/delta time sensor, and a continuous 
tone from the onboard computers. 

The primary C/W system has three modes of operation: 
ascent, normal, and acknowledge. 

The system receives 120 inputs directly from transducers, 
through signal conditioners, or from the flight forward 
multiplexer/demultiplexers. These inputs are fed into a multi¬ 


plexing system. (Some of these 120 inputs will not be used on 
the initial development flight test.) These inputs can be either 
analog or discretes; the analog signals are 0 to 5 volts dc; the 
discretes either 0, 5, or 28 volts dc. All of these inputs are 
designed to provide high, low, or both high and low limit 
detection. If the parameter has exceeded its limits eight 
consecutive times for 100 milliseconds, it will turn on the C/W 
tone, light the appropriate light on the forward flight deck panel, 
illuminate the four master alarm lights (in normal mode), and 
store the parameter in memory. The aural tone can be silenced 
and the master alarm light extinguished by depressing any one of 
the master alarm pushbutton light indicators; however, the C/W 
light will remain illuminated until the out-of-tolerance condition 
is corrected. In the ascent mode the commander’s master alarm 
pushbutton light indicator does not illuminate. In the acknowl¬ 
edge mode, the 40 annunciator lights will not illuminate during 
an out-of-tolerance condition unless the master alarm pushbutton 
light indicator at the commander’s or pilot’s station is depressed. 

The aft flight deck C/W display and control panel consists 
of 120 status display lights, one corresponding to each input. 
PARAMETER SELECT thumbwheels on this panel are used to 
identify (by number) a specific parameter for further action. 

The LIMIT SET switch grouping is used to change limits or 
to read out a parameter’s limits. The VALUE thumbwheels are to 
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select the lower or upper limits. The LIMIT UPPER position 
specifies the parameter’s upper limit for change or read-out and 
the LOWER position specifies the parameter’s lower limit. The 
FUNC SET switch position sets the limit (upper or lower) 
specified by the settings on the VALUE thumbwheels for the 
parameter on the PARAMETER SELECT thumbwheels. The 
READ position of the switch illuminates the C/W status lights 
under the STATUS LIMIT VALUE XXX VOLTS heading 
corresponding to that parameter’s limit. The value read 
corresponds to the parameter’s full-scale range on a scale of 0 to 
5 volts dc. 

The PARAMETER ENABLE switch position enables 
(activates) the parameter selected; if positioned to INHIBIT, the 
selected parameter is inactivated. 

The PARAM STATUS TRIPPED switch illuminates all C/W 
status lights corresponding to the input parameters that are 
currently out of tolerance, regardless whether they are inhibited. 
The INHIBITED position illuminates C/W status lights 
corresponding to the parameters that have been inhibited. 

The LAMP TEST switch tests the illumination in the C/W 
status lights; LEFT for the five left columns and RIGHT for the 
five right columns. 

The MEMORY READ switch illuminates C/W status lights 
for all enabled parameters that have been out of tolerance since 
the last MEMORY CLEAR command. The CLEAR position 
clears tine recall memory in the C/W electronics unit. 

A CAUTION/WARNING READ switch on the forward C/W 
display and control panel illuminates lights on the forward C/W 
panel from enabled parameters that have been out of tolerance 


since the last MEMORY CLEAR command. The MEMORY 
CLEAR and LAMP TEST switches on the forward C/W display 
and control panel also have the same functions as those on the 
aft panel. 

The backup caution and warning system is part of the 
systems management fault detection and annunciation, the 
GN&C system, and the backup flight system software (computer) 
programs. The backup C/W annunciation responds to the same 
conditions as the primary system. It illuminates BACKUP C/W 
light on the forward flight deck display and control panel, 
produces a continuous tone in the flight crew headsets and 
speaker boxes, illuminates the MASTER ALARM pushbutton 
light indicators, and produces a fault message on the CRT 
display. The MASTER ALARM lights operate in the same 
manner as in the primary C/W system. The computer keyboards 
can be used to change the lower and upper limit (not in all cases) 
or inhibit and re-enable parameters, similar to the primary C/W. 

The systems management Alert program, which operates in 
a manner similar to the backup C/W system, is designed to 
inform the flight crew of a situation that may be leading up to a 
caution or warning, or a situation that may require additional 
procedures. When an Alert parameter exceeds its limits, the SM 
ALERT light is illuminated on the flight deck forward display 
and control console and a signal is sent to the primary C/W 
system to turn on the systems management tone and the CRT 
displays. 

The contractors involved are: Aerospace Avionics, Bohemia, 
NY (annunciators), and Martin Marietta, Denver, CO (caution 
and warning electronics and caution and warning status display, 
limit module). 
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SMOKE DETECTION AND FIRE SUPPRESSION 


Smoke detection and fire suppression capabilities are 
provided in the crew cabin avionics bays, in the crew cabin, and, 
for the operational flights, the payload bay. 

Ionization detection elements, which sense levels of smoke 
concentrations or rate of concentration change, trigger alarms 
and provide smoke-concentration-level intelligence to the 
performance-monitoring system on the crew cabin flight deck 
display and control panel. There are two ionization detection 
elements each in crew cabin avionics bays 1,2, and 3A. There are 
three ionization detection elements in the crew cabin, one in the 
ECLSS cabin fan plenum outlet, which is located beneath the 
crew cabin mid deck floor, and one each in the crew cabin left 
and right flight deck return air ducts. There are also ionization 
detectors in Spacelab when it is in the payload bay. 

Fire suppression in the crew cabin avionics bays 1, 2, and 
3A is by remote-controlled fire extinguishing agents in each bay. 
For the remaining areas there are portable extinguishers. 

The two smoke ionization detector elements (A and B) in 
crew cabin avionics bays 1, 2, or 3A will trip if the smoke con¬ 
centration is greater than 2000 plus or minus 200 micrograms per 
cubic meter (cubic foot) or if the rate of smoke increase is 22 
micrograms per cubic meter (cubic foot) for eight consecutive 
counts in 20 seconds. The trip signal will illuminate the 
applicable AV BAY red SMOKE DETECTION A or B light on 
flight deck display and control Panel LI. A siren tone will sound 
in the crew members’ headsets. 

Avionics bays 1, 2, and 3A each have a Freon-1301 
(bromotrifluoromethane) extinguishing agent bottle. To activate 
the bottle in the applicable bay, the applicable FIRE 
SUPPRESSION AV BAY switch on the flight deck display and 
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control panel is positioned to ARM on panel LI. The applicable 
FIRE SUPPRESSION AV BAY AGENT DISCH (discharge) 
guarded pushbutton while light indicator is depressed on the 
panel. The pushbutton white light indicator activates the 
corresponding pyro initiator controller (PIC), which drives a 
pyrotechnic valve to discharge the Freon-1301 fire extinguishing 
agent from the bottle. The pushbutton is held until the white 
light in the.pushbutton iluminates, which indicates that fire 
extinguishing agent bottle pressure has decreased from 10,350 
millimeters of mercury (mmHg) (200 psi) at 21°C (70°F) to 
3105 plus or minus 517 mmHg (60 plus or minus 10 psi). The 
pushbutton white light indicator would illuminate if the pressure 
in that bottle had decayed prior to its use. 

The SMOKE DETECTION switch on flight deck display and 
control panel LI provides for reset of a tripped smoke detection 
unit. The SMOKE DETECTION CIRCUIT TEST switch on panel 
LI tests the smoke detectors, the smoke detection red lights on 
panel LI, the audible tone in the crew member’s headset, and the 
siren. 


Various parameters of the smoke detection system and the 
remote fire extinguishing agent system are provided to telemetry. 

The SMOKE DETECTION CABIN red light on the flight 
deck display and control panel would illuminate from the smoke 


detection ionization element in the ECLSS cabin fan plenum; the 
L FLT DECK red FIRE DETECTION light would illuminate 
from the crew cabin left flight deck return air duct smoke 
ionization element, and the R FLT DECK red FIRE 
DETECTION light would illuminate from the right flight deck 
return air duct. 


Portable hand-held fire extinguishers are available in the 
crew cabin. The extinguishing agent is Halon-1301 (mono- 
bromotrafluoromethane). Halon-1301 minimizes the major 
hazards of a conflagration: smoke, heat, oxygen depletion, and 
formation of pyrolysis products such as carbon monoxide. 


Two of the fire extinguishers are located on the crew 
module cabin mid deck and two on the flight deck. The fire 
extinguisher nozzles can fire through fire hole ports in the 
display and control panels in the event of fire in back of the 
display and control panels. 


The contractors involved with the smoke detection and fire 
suppression system are Brunswick Celesco, Costa Mesa, CA 
(smoke detectors and remote control fire extinguishing agent); 
J. L. Products, Gardena, CA (arming fire pushbutton); Metalcraft 
Inc., Baltimore, MD (portable fire extinguishers). 
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HEAD UP DISPLAY 


In September 1979 the NASA directed Rockwell 
International’s Shuttle Orbiter Division to add a Head Up Display 
(HUD) System to the Shuttle Orbiter. This was ‘the result of 
approximately two years of study activity by the-J'JASA and 
Rockwell with the support of several HUD subcontractors. 
Rockwell awarded a letter contract to Kaiser Electronics, San 
Jose, California, in June, 1980 to provide a HUD system for the 
Orbiter. The program is progressing on schedule and a bread¬ 
board hardware set was delivered to Rockwell in November, 
1980 for use in the Avionics Development Laboratory for 
preliminary interface testing. 


A head up display system allows an out of the window view 
while providing flight commands and information to the flight 
crew by superimposing this information on a transparent com- 



Head Up Display 


biner in the out the window field of view. The baseline Orbiter, 
like most commercial aircraft utilizes conventional electro¬ 
mechanical displays on a display panel beneath the glareshield 
which necessitates that the flight crew look down for informa¬ 
tion and then up for the out the window information. During 
critical flight phases, in particular the approach and landing case, 
this is not an easy task. In the Orbiter with its unique vehicle 
dynamics and approach trajectories this situation is even more 
critical. 

Since the Orbiter is intended to be in service for several 
years, it was considered appropriate that the Orbiter be equipped 
with this system. In the study phase, it was determined that 
most recent military aircraft include HUD systems and that the 
airliners used by several European countries also contain HUD’s. 
Additionally, it was apparent that the display portion of some 
existing HUD systems would lend themselves to installation in 
the Orbiter. So as to minimize development costs, the HUD 
system requirements for the Orbiter were patterned after existing 
hardware. 

While the display portion of the Orbiter system could be 
similar to existing HUD systems, the drive electronics could not. 
The Orbiter Avionics is digital and since minimal impact to the 
Orbiter was paramount, the HUD drive electronics are designed 
to receive data from the Orbiter data buses. Most existing HUD 
drive electronics use analog data or a combination analog/digital 
interface. In the Orbiter system, the HUD drive electronics 
utilizes to the maximum extent possible the same data which 
drives the existing electromechanical display devices to minimize 
impact on the Orbiter software. 

The Orbiter display device as designed by Kaiser Electronics 
uses a cathode ray tube (CRT) to create the image which is then 
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projected through a series of lens on a combining glass which is 
very similar to a system they developed and produce for the 
Cobra Jet Aircraft. Certain Orbiter design requirements including 
vertical viewing angles, brightness and unique mounting require¬ 
ments dictated some changes from the Cobra Jet configuration. 

On the Orbiter. a HUD will be installed at each flight station 
(Commander and Pilot). Each HUD system is single string 
although connected to two data buses all redundancy is achieved, 
the fact that a system is installed at each station (station redun¬ 
dancy similar to that used for the present displays) and the fact 
that the existing displays can be used in the event of one HUD 
failure. 

It is planned to install the HUD system on the Orbiter in 
line in the production flow for OV-099, OV-103 and OV-104 and 
to build a kit which supports installation of the HUD on OV-102 
for STS-5. In addition, several other systems will be built for test 
sites and simulators. 

The HUD is an electronic/optical device with two set of 
combiner glasses located above the glareshield and in the direct 
line of sight of the Commander and the Pilot. Essential flight 
information for vehicle guidance and control during approach 
and landing is projected on the combiner glasses and is collimated 
at infinity. 

In the example shown, the orbiter is in the final phase of 
the preflare maneuver with EAS (equivalent airspeed) = 249 kts, 
(knots) (left scale), altitude = 300 feet (right scale), with orbiter 
heading (+) slightly to the left of runway centerline — which 
indicates a light crosswind from the left. The velocity vector 
£>— 1 —Q-<3, shown just crossing runway threshold, dis¬ 

closes a slightly fast airspeed condition represented by the 
thermometer type indicator above the left wing. The guidance 
triangles on the wing tips show that the pilot is precisely fol¬ 



lowing the guidance command. The lighted outline of the start 
of landing zone can be seen at the top of the combiner. The 
HUD is capable of displaying speed brake command and position, 
discrete messages such as “Landing Gear”, and during rollout, 
deceleration and wing leveling parameters. 

The images are generated by a small cathode ray tube (CRT) 
and passed through a series of lenses before being displayed to 
the flight crew on the combiners as lighted symbology. The 
transmissiveness of the combiner is such that the crew can look 
through them and see actual targets, i.e. runway, etc. Example: 
Assume the crew is conducting an instrument approach and is 
currently at 2133 meters (7,000 feet) on the final approach 
course in a solid overcast, the base of which is at 1524 meters 
(5000 feet): The lighted outline of the runway would be dis¬ 
played on the combiner. However when the orbiter exited the 
overcast at 1524 meters (5000 feet), the lighted outline of the 
runway would be superimposed on the real runway. 

As the orbiter proceeds down the steep glideslope, the 
velocity vector is superimposed over the steep glideslope aim 
point. At preflare altitude, the guidance triangles move up to 
command the pullout. The pilot maintains the velocity vector 
symbol between the triangles. After a short period of stabilized 
flight on the shallow glideslope, the guidance triangles again com¬ 
mand a pitch-up until the nose is about 8 degrees above the hori¬ 
zon — which is essentially the touchdown attitude. After touch¬ 
down, during the rollout phase, guidance commands plus 
6 degrees theta (nose above the horizon) until 165 KEAS (knots 
equivalent airspeed), then a de-rotation maneuver is commanded. 


The HUD is an excellent landing aid and is considered the 
primary pilot display during this phase. As the system matures, 
it is anticipated that the HUD will be used for star/land mark 
sightings as well as rendezvous with other orbiting vehicles, space 
platforms, etc. 
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DISPLAYS AND CONTROLS 


The displays and controls in the orbiter crew compartment 
enable the flight crew members to supervise, control, and moni¬ 
tor the Space Shuttle mission and vehicle. They include con¬ 
trollers, cathode ray tube (CRT) displays and keyboards, coding 
and conversion electronics for instruments and controllers, 
lighting, timing devices, and a caution and warning system. 

The displays and controls are designed so that a crew of two 
can perform normal operations in all mission phases (except 
payload operations). They are designed to enable a safe return to 
earth from either commander’s or pilot’s seat; flight-critical 
displays and controls are accessible from the forward flight deck 
station from launch to orbital operations and from deorbit to 
landing rollout. 



Forward Displays and Controls 



Forward Displays and Controls 
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Aft Station Displays and Controls 

All controls are protected against inadvertent activation. 
Toggle switches are protected by wicket guards, and lever lock 
switches are used wherever inadvertent activation would be 
detrimental to flight operations or could damage equipment. 
Cover guards are used on switches where inadvertent actuation 
would be irreversible. 


All displays and controls are provided with dimmable 
floodlighting in addition to integral meter lighting. 

The contractors involved are: Abbott Transistor, Los 
Angeles, CA (transformers), Aerospace Avionics, Bohemia, NY 
(propellant quantity indicator and annunciators); Aiken Indus¬ 
tries, Mechanical Product Division, Jackson, MI (thermal circuit 
breakers); Applied Resources, Fairfield, NJ (rotary switch), 
Bendix Corp., Teterboro, NJ (surface position, alpha-Mach, 


) 


) 



Aft Station Displays and Controls 

altitude, vertical velocity indicators), Bendix Corp., Davenport, 
IA (accelerometer indicator); Conrac Corp., West Caldwell, NJ 
(mission and event timer); Edison Electronics Division of 
McGraw Edison, Manchester, NH (digital select thumbwheels, 
toggle switches); Eldec Corp., Lynwood, WA (tape meter); 
Honeywell, Inc., St. Petersburg, FL (flight control system); 
IBM Corp., Federal Systems Division, Electronic Systems 
Center, Owego, NY (cathode ray tube display unit, computer 
keyboard), ILC Technology, Sunnyvale, CA (cabin interior and 
exterior lighting), J.L. Products, Gardena, CA (pushbutton 
switch), Lear Siegler, Grand Rapids, MI (attitude direction 
indicator), Martin Marietta, Denver CO (C/W status display, limit 
module), Weston Instruments, Newark, NY (event indicator, 
electrical indicator meter), Collins-Rockwell, Cedar Rapids, IA 
(display driver unit, horizontal situation indicator), U.S. Radium 
Inc., Parisippany, NJ (integrally-illuminated panels), Betatronix, 
Hauppauge, NY (potentiometers). 
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SHUTTLE CARRIER AIRCRAFT 


The NASA Shuttle carrier aircraft (SCA) is a Boeing 747 
(100 series) purchased from American Airlines on June 17, 1974. 
It was modified to ferry orbiters to and from various Shuttle 
facilities and to transport and release Orbiter 101 for the ALT 
program. 

Modifications to the basic 747 aircraft included removal of 
interior equipment (passenger seats, galleys, etc.); changes to air 
conditioning ducts, electrical wiring, and plumbing; installation 
of higher-thrust engines (JT9D-7AHW) and the 747-200 series 
rudder ratio-changer; and alteration of the longitudinal trim 
system to permit two degrees more nose-down trim. Other 
changes included relocation and installation of antennas, addition 
of bulkheads and doublers in the fuselage main deck, addition of 
structural doublers and tip fins to the horizontal stabilizers to 
improve directional stability with the orbiter on top of the 
aircraft, and addition of one forward and two aft support 
assemblies for attachment of the orbiter. The modifications 
increased the basic weight of the aircraft by approximately 1270 
kilograms (2800 pounds). 

The Orbiter’s mated location on the 747 was based on 
consideration of static stability and control, structural modifica¬ 
tion, weight, and performance. Center-of-gravity limits for the 
747 with the orbiter mated are 15 percent of the 747’s mean 
aerodynamic chord (MAC) for the forward limit and 33 percent 
MAC for the aft limit. Longitudinal stability is similar to that of 
the basic 747; ballast must be added so that the center of gravity 
limits are not exceeded. The ballast is carried in standard 747 
cargo containers in the forward cargo compartment. The mated 



Boeing 747Shuttle Carrier 


configuration allows the 747 center of gravity to shift approxi¬ 
mately 3 meters (10 feet) upward. 

For the ferry flight configurations, the tail cone fairing is 
installed on the orbiter to decrease aerodynamic drag and buffet, 
and aerosurface control locks are added to the orbiter’s elevons. 
The orbiter is unmanned and the orbiter systems inert. A bailout 
system also is installed in the 747. 

Some modifications to the 747 SCA are removable. These 
include support struts for the orbiter, horizontal tip fans, and 
associated cabling and umbilicals. 
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ORBITER APPROACH AND LANDING TEST PROGRAM 


The nine-month-long Approach and Landing Test (ALT) 
program in 1977 at NASA’s Dryden Flight Research Center, 
Edwards Air Force Base, proved that America’s newest 
spacecraft, the Enterprise (OV-101), is truly a “magnificent 
flying machine and its aerodynamic flight controls handle crisply 
and accurately.” 

Two NASA astronaut crews—Fred Haise and Gordon 
Fullerton and Joe Engle and Dick Truly—took turns flying the 
68,040 kilogram (150,000-pound) spacecraft to free-flight 
landings and described it as “magnificent, precise, excellent, 
outstanding.” 



The ALT program involved a total of 13 flights (five 
unmanned “captive,” three manned captive, and five free flights), 
as well as various ground tests. 

The ground tests included taxi tests of the mated 747- 
orbiter to determine structural loads and responses and assess the 
mated capability in ground handling and control characteristics 
up to flight takeoff speed. The taxi tests also validated 747 
steering and braking with orbiter attached. A ground test of 
orbiter systems followed the unmannned captive tests. All orbiter 
systems were activated as they would be in atmospheric flight; 
this was the final preparation for the manned captive flight 
phase. 

In the unmanned captive flights, the orbiter—its systems 
inert—was attached atop the 747 Shuttle carrier aircraft. These 
flights assessed the structural integrity and performance handling 
qualities of the mated craft. 

The three manned captive flights which followed included 
an astronaut crew aboard the orbiter operating its flight control 
systems while the orbiter remained perched atop the 747. These 
flights were designed to exercise and evaluate all systems in the 
flight environment in preparation for the orbiter release (free) 
flights. They included flutter tests of the mated craft at low and 
high speed, a separation trajectory test, and a dress rehearsal for 
the first orbiter free flight. 

In the five free flights the astronaut crew separated the 
spacecraft from the 747 and flew it back to a landing. These 
flights verified the orbiter pilot-guided approach and landing 
capability, demonstrated the orbiter subsonic terminal area 
energy management autoland approach capability, and verified 
the orbiter subsonic airworthiness, integrated system operation, 
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and selected subsystems in preparation for the first manned 
orbital flight. The flights demonstrated the orbiter’s ability to 
approach and land safely with a minimum gross weight and using 
several center-of-gravity configurations. 

For all of the captive flights and the first three free flights 
the Orbiter was outfitted with a tail cone covering its aft section 
to reduce aerodynamic drag and turbulence. The final two free 
flights were without the tail cone and the simulated engines- 
three main and two orbital maneuvering—were exposed 
aerodynamically. 

The final phase of the ALT program prepared the spacecraft 
for four ferry flights. Fluid systems were drained and purged, the 
tail cone was re-installed, and elevon locks were installed. The 
forward attachment strut was replaced to lower the orbiter’s cant 
from six to three degrees. This reduces drag of the mated vehicles 
during the ferry flights. 

After the ferry flight tests, Orbiter 101 was returned to the 
NASA hangar at Dryden FRC and modified for vertical ground 
vibration tests at the Marshall Space Flight Center, Huntsville, 


AL, and then was ferried to Huntsville. At the Marshall Space 
Flight Center, the Enterprise was mated with the external tank 
and solid rocket boosters and subjected to vertical ground 
vibration tests. These tested the mated configuration’s critical 
structural dynamic response modes, which were assessed against 
analytical math models used to design the various element- 
element interfaces. 

The Enterprise then was ferried to the Kennedy Space 
Center, where it was mated with the external tank and solid 
rocket boosters and transported via the Mobile Launch Platform 
to Launch Complex 39A. At Launch Complex 39A, it served as a 
practice and launch complex fit check verification tool represent¬ 
ing the flight vehicles. 

Finally, the Enterprise was ferried back to Edwards AFB, 
CA, and returned via overland transport to Rockwell’s Palmdale 
final assembly facility. Certain components will be refurbished 
for use on flight vehicles being assembled at Palmdale. It will 
eventually be used as a practice and fit check verification tool at 
Vandenberg AFB, CA. 


SPACE SHUTTLE CHRONOLOGY 


Date Event 

1972 

Aug. 9 Rockwell receives authority to proceed, Space 
Shuttle orbiter 

1974 

June 4 Start structural assembly crew module (Orbiter 101) 
July 17 Start long-lead fabrication (MPTA-098) 

Aug. 26 Start structural assembly aft fuselage (Orbiter 101) 

1975 

Jan. 6 Start long-lead fabrication aft fuselage (STA-099) 
March 27 Mid fuselage on dock, Palmdale (Orbiter 101) 


Date Event 

March 27 Start long-lead fabrication aft fuselage (Orbiter 102) 

May 23 Wings on dock, Palmdale—less elevons, seals, and 
main gear doors (Orbiter 101) 

May 27 Vertical stabilizer on dock, Palmdale (main fin box 
only) (Orbiter 101) 

June 24 Start structural assembly (MPTA-098) 

Aug. 25 Start final assembly and closeout system installation 
(Orbiter 101) 

Sept. 5 Aft fuselage on dock, Palmdale (Orbiter 101) 
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Date 


Event 


Date 


Event 


Oct. 17 Space Shuttle main engine first mainstage test at 
NSTL 

Oct. 31 Lower forward fuselage on dock, Palmdale 
(orbiter 101) 

Nov. 17 Start long-lead fabrication crew module 
(Orbiter 102) 

Dec. 1 Upper forward fuselage on dock, Palmdale 
(Orbiter 101) 

Dec. 20 First Space Shuttle main engine 60-second duration 
test, NSTL 

Dec. 31 1/4-scale model ground vibration test facility con¬ 

struction complete, Downey, Building 288 

1976 

Jan. 16 Crew module on dock, Palmdale (Orbiter 101) 

Jan. 23 MPTA-098 truss on dock, Downey 

Feb. 16 Start fabrication forward fuselage (STA-099) 

March 3 Payload bay doors on dock, Palmdale (Orbiter 101) 
March 12 Complete final assembly and closeout system 
installation, Palmdale (Orbiter 101) 

March 15 Start functional checkout (Orbiter 101) 

March 17 Complete pre-mate MPTA test structure, Downey, 
and deliver to Palmdale 

April 2 Crew escape system test sled on dock, Downey 

April 3 Complete assembly and deliver MPTA structure on 

dock, Lockheed Test Site, Palmdale 
April 22 Body flap on dock, Palmdale (Orbiter 101) 

May 3 Complete MPTA-098 proof load test set-up, 
Lockheed test site, Palmdale 
June 14 Start aft fuselage assembly (STA-099) 

June 24 Complete MPTA-098 proof load test, Lockheed test 
site and on dock, Palmdale 

June 25 Complete functional checkout (Orbiter 101) 

June 28 Start assembly crew module (Orbiter 102) 


June 28 Start horizontal ground vibration tests and proof 
load tests (Orbiter 101) 

June 29 MPTA-098 truss assembly, Palmdale, Bldg. 294 to 
Bldg. 295 

June 30 Space Shuttle main engine dummy set on dock, 
Palmdale (Orbiter 101) 

July 8 MPTA-098 on dock, Downey, without truss 
assembly 

July 12 Start installation secondary structure (MPTA-098) 

Aug. 2 Start final assembly forward fuselage (STA-099) 

Aug. 2 Start carrier aircraft modification 

Aug. 20 Complete horizontal ground vibration tests and 

proof load tests (Orbiter 101) 

Aug. 23 Start Delta F modification (Orbiter 101) 

Aug. 27 Reaction control system/orbital maneuvering 
system pods (simulated), approach and landing 
tests, on dock, Palmdale (Orbiter 101) 

Aug. Start overland roadway construction from 

Palmdale to DFRC 

Sept. 10 Complete Delta F modifications (Orbiter 101) 
Sept. 13 Start preparations for first rollout (Orbiter 101) 

Sept. 13 Start assembly aft fuselage (Orbiter 102) 

Sept. 17 Rollout (Orbiter 101) 

Sept. 17 Complete on-stand construction, NSTL 

Sept. 20 Start Delta F retest (Orbiter 101) 

Oct. 1 Start final assembly, vertical stabilizer (STA-099) 

Oct. 1 Start final assembly, wing (STA-099) 

Oct. 15 Mid fuselage on dock, Palmdale (STA-099) 

Oct. 26 Escape system test assembly sled ship from 
Downey to Holloman, NM 
Oct. 29 Deliver ejection seats (Orbiter 101) 

Oct. 29 Complete Delta F retest (Orbiter 101) 

Oct. 31 Solid rocket booster 1/4-scale model (burnout 
configuration) on dock, Downey 
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Event 

Date 

Nov. 4 

Complete 747 Shuttle carrier aircraft modifica¬ 
tion, rollout, Boeing 

Feb. 25 

Nov. 18 

Start escape system sled test, Holloman, NM 

Feb. 28 

Nov. 26 

Complete integrated checkout (Orbiter 101) 


Nov. 28 

Complete orbiter transporter strongback 

March 2 

Dec. 7 

Tail cone fairing on dock, Palmdale 


Dec. 10 

Complete overland roadway construction, 

March 16 


Palmdale to DFRC 

March 21 

Dec. 13 

Start assembly upper forward fuselage 
(Orbiter 102) 

April 1 

Dec. 17 

1977 

External tank 1/4-scale model on dock, Downey 

April 6 

Jan. 3 

Start assembly vertical stabilizer (Orbiter 102) 

April 6 

Jan. 14 

Complete post-checkout (Orbiter 101) 

May 20 

Jan. 14 

Boeing 747 Shuttle carrier aircraft delivered to 



DFRC 

May 26 

Jan. 25 

Complete aft fuselage assembly on dock, 



Palmdale (STA-099) 

May 27 

Jan. 28 

Simulated crew module on dock, Palmdale 
(STA-099) 


Jan. 31 

Solid rocket booster 1/4-scale model (liftoff 
configuration) on dock, Downey 

May 31 

Jan. 31 

Orbiter 101 transported overland from Palmdale 



to DFRC (36 miles) 

May 31 

Jan. 31 

Mass simulated Space Shuttle Main Engines on 



dock, Palmdale (Orbiter 101) 

May 31 

Feb. 7 

Orbiter 101 Shuttle carrier aircraft mate start 

June 3 

Feb. 10 

Mid fuselage on dock, Palmdale (Orbiter 102) 

June 7 

Feb. 15 

Complete Orbiter 101 Shuttle carrier aircraft 



mated ground vibration test and taxi tests 

June 18 

Feb.18 

Conduct first inert captive flight, DFRC (2 hr. 



5 min.) (Orbiter 101) 

June 23 

Feb. 22 

Conduct second inert captive flight, DFRC (3 hr. 



13 min.) (Orbiter 101) 

June 24 


Event 

Conduct third inert captive flight, DFRC (2 hr. 
28 min.) (Orbiter 101) 

Conduct fourth inert captive flight, DFRC (2 hr. 

11 min.) (Orbiter 101) 

Conduct fifth inert captive flight, DFRC (1 hr. 

39 min.) (Orbiter 101) 

Wings on dock, Palmdale (STA-099) 

Orbiter 1/4-scale model on dock, Downey 
Lower forward fuselage on dock, Palmdale 
(STA-099) 

Upper forward fuselage on dock, Palmdale 
(STA-099) 

Vertical stabilizer on dock, Palmdale (STA-099) 
Nose landing gear doors on dock, Palmdale 
(STA-099) 

Aft payload bay doors on dock, Palmdale 
(STA-099) 

Complete systems installation/final acceptance, 
MPTA-098, transport from Downey to Seal 
Beach 

Solid rocket booster 1 /4-scale model, burnout 
and maximum q configuration, on dock, 

Downey 

Solid rocket booster 1/4-scale model, liftoff con¬ 
figuration, on dock, Downey 
Body flap on dock, Palmdale (STA-099) 

Ship MPTA-098 from Seal Beach to NSTL 
Complete integrated checkout and hot fire 
ground test, DFRC (Orbiter 101) 

Conduct first manned captive active flight, 
Orbiter 101-747, DFRC (55 min. 46 sec.) 
Deliver first Space Shuttle main engine to NSTL 
(MPTA-098) 

Deliver MPTA-098 to NSTL 
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Date 

Event 

June 28 

Conduct second manned captive active flight, 
Orbiter 101—Shuttle carrier aircraft, DFRC, 

(1 hr. 2 min.) 

July 5 

Start long-lead fabrication aft fuselage, 

Orbiter 103 

July 8 

Deliver second main engine to NSTL 
(MPTA-098) 

July 14 

Deliver third main engine to NSTL (MPTA-098) 

July 18 

Conduct two-minute firing of solid rocket 
booster at Brigham City, Utah, Thiokol (2.4 
million pounds of thrust) 

July 22 

Deliver forward payload bay doors, on dock, 
Palmdale (STA-099) 

July 26 

Conduct third manned captive active flight, 
Orbiter 101—Shuttle carrier aircraft, DFRC 
(59 min. 50 sec.) 

Aug. 12 

Conduct first free flight, ALT, tail cone on, 
DFRC (5 min. 21 sec.) (Orbiter 101) 

Aug. 26 

Deliver wings on dock Palmdale (Orbiter 102) 

Sept. 7 

Lower forward fuselage on dock Palmdale 
(Orbiter 102) 

Sept. 10 

Deliver external tank MPTA-098 (Martin 
Marietta) to NSTL 

Sept. 13 

Conduct second free flight, ALT, tail cone on, 
DFRC (5 min. 28 sec.) (Orbiter 101) 

Sept. 23 

Conduct third free flight, ALT, tail cone on, 
DFRC (5 min. 34 sec.) (Orbiter 101) 

Sept. 30 

Complete mate vertical stabilizer, Palmdale 
(STA-099) 

Oct. 12 

Conduct fourth free flight, ALT, first tail cone 
off, DFRC (2 min. 34 sec.) (Orbiter 101) 

Oct. 26 

Conduct fifth free flight, ALT, final tail cone 
off, DFRC (2 min. 1 sec.) (Orbiter 101) 

Oct. 28 

Lower forward fuselage on dock Palmdale 
(Orbiter 102) 


Date 

Event 

Nov. 4 

Start forward reaction control system develop¬ 
ment tests, White Sands Test Facility, N.M. 

Nov. 4 

Deliver aft fuselage on dock Palmdale 
(Orbiter 102) 

Nov. 7 

Forward reaction control system on dock 
Palmdale (STA-099) 

Nov. 7 

Start final assembly and closeout system installa¬ 
tion Palmdale (Orbiter 102) 

Nov. 15 

First ferry flight test, DFRC (3 hr. 21 min.) 
(Orbiter 101) 

Nov. 16 

Second Ferry flight test, DFRC (4 hr. 17 min.) 
(Orbiter 101) 

Nov. 17 

Third ferry flight test, DFRC (4 hr. 13 min.) 
(Orbiter 101) 

Nov. 18 

Fourth ferry flight test, DFRC (3 hr. 37 min.) 
(Orbiter 101) 

Dec. 9 

Complete approach and landing flight tests 
including ferry flights (Orbiter 101) 

Dec. 12 

Start removal for mated vertical ground vibration 
test modification at DFRC (Orbiter 101) 

Dec. 13 

Complete propellant load testing NSTL 
(MPTA-098) 

Dec. 31 

1978 

Deliver Space Shuttle main engine envelope/ 
electrical simulators, on dock Palmdale 
(Orbiter 102) 

Jan. 10 

Vertical stabilizer on dock Palmdale 
(Orbiter 102) 

Jan.18 

Second solid rocket booster firing, Thiokol 

Feb. 10 

Complete final assembly STA-099, Palmdale 

Feb.14 

STA-099 on dock, Lockheed facility, Palmdale 

Feb.17 

Crew module on dock, Palmdale (Orbiter 102) 

Feb. 24 

Body flap on dock Palmdale (Orbiter 102) 

March 3 

Complete modification for mated vertical ground 
vibration test, DFRC (Orbiter 101) 


519 







Space Transportation System Background Information 



Date 

Event 

March 6 

Upper forward fuselage on dock, Palmdale 
(Orbiter 102) 

March 10 

Ferry Orbiter 101 atop Shuttle carrier aircraft 
from DFRC to Ellington Air Force Base, TX 
(approximately 3 hours, 38 minutes) 

March 13 

Ferry Orbiter 101 atop Shuttle carrier aircraft 
from Ellington AFB to Marshall Space Flight 
Center, Huntsville, AL (approximate 2 hours) 

March 19 

Aft payload bay doors on dock, Palmdale 
(Orbiter 102) 

March 31 

External tank for mated vertical ground vibra¬ 
tion test arrives at MSFC from Martin Marietta, 
Michoud, LA 

March 31 

Operational readiness date, solid rocket booster 
refurbishment and subassembly, Kennedy Space 
Center, FL 

April 14 

Complete ground vibration test modification at 
MSFC; deliver Orbiter 101 for mated vertical 
ground vibration test 

April 21 

First static firing, MPTA-098, NSTL (2.5 
seconds; stub nozzles) 

April 23 

Complete final assembly and closeout system 
installation, ready for power-on (Orbiter 102) 

April 24 

Start pre-combined systems test (Orbiter 102) 

April 28 

Forward payload bay doors on dock, Palmdale 
(Orbiter 102) 

May 19 

Second static firing MPTA-098, NSTL 
(15 seconds, 70% thrust; stub nozzles) 

May 19 

Start forward reaction control system thermal 
tests, WSTF 

May 26 

Start development test aft reaction control 
system, WSTF 

May 26 

Complete forward reaction control system struc¬ 
ture (Orbiter 102) 


Date 

Event 

May 26 

Upper forward fuselage mate, Orbiter 102 

May 30 

Start test Orbiter 101/external tank mated verti¬ 
cal ground vibration test, MSFC 

May 31 

Loaded solid rocket boosters (2) arrive at MSFC 
for mated vertical ground vibration test 

June 1 5 

Third static firing, MPTA-098, NSTL (50 seconds 
90% thrust, last 5 seconds 70% thrust; stub 
nozzles) 

July 3 

Deliver left-hand orbital maneuvering system pod 
to WSTF 

July 7 

Fourth static firing, MPTA-098, NSTL (No. 2 
engine 70% thrust for 90 seconds, simulated one 
engine out at 90 seconds, then No. 1 and No. 3 
to 90% thrust- then to 70% thrust, then to 

90% for 100 seconds; stub nozzles) 

July 7 

Complete mate forward and aft payload bay 
doors (Orbiter 102) 

July 13 

Complete forward reaction control system 
development tests, WSTF 

July 13 

Reconfigure from boost to launch, mated verti¬ 
cal ground vibration test. MSFC (Orbiter 101) 

July 1 5 

Deliver solid rocket boosters (2) empty to MSFC 
for mated vertical ground vibration test. 

July 21 

First firing development test, orbital maneuver¬ 
ing system, WSTF 

July 31 

Operational readiness date, Orbiter Processing 
Facility Bay 1, Orbiter landing Facility and 
Hypergolic Maintenance Facility, KSC 

Aug. 11 

Complete forward reaction reaction control 
system (Orbiter 102) 

Aug. 11 

Complete test preparation STA-099, Lockheed 
facility, Palmdale 

Aug. 1 1 

Complete forward reaction control system 
thermal test. WSTF 


; 


> 
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Event 

Aug. 14 

Start coefficient tests STA-099, Lockheed 
facility, Palmdale 

Aug. 31 

Operational readiness date, Vertical Assembly 
Building High Bay 3 and 4, KSC 

Sept. 8 

Start orbital maneuvering system left-hand 
development test, WSTF, N.M. 

Sept. 20 

Start launch configuration test liftoff configura¬ 
tion, Orbiter 101/external tank/solid rocket 
boosters mated vertical ground vibration test at 
MSFC 

Sept. 20 

Start acoustic test, forward reaction control 
system, WSTF 

Sept. 25 

Start pre-combined system test (Orbiter 102) 

Sept. 29 

Complete coefficient tests, STA-099, Lockheed 
facility, Palmdale 

Sept. 30 

Operational readiness date, mobile launch plat¬ 
form, KSC 

Oct-19 

Third solid rocket booster firing, Thiokol 

Nov. 11 

Complete forward reaction control system 
acoustic test, WSTF 

Nov. 15 

Complete orbital maneuvering system develop¬ 
ment test, WSTF 

Nov. 15 

Complete aft reaction control system develop¬ 
ment test, WSTF 

Nov. 30 

Operational readiness date, Pad A, KSC 

Dec. 9 

Start orbital maneuvering system Phase I quali¬ 
fication tests, WSTF 

Dec. 15 

Start aft reaction control system Phase I quali¬ 
fication tests, WSTF 

Dec. 15 

1979 

Complete pre-combined system test, Palmdale 
(Orbiter 102) 

Jan. 2 

Start long-lead fabrication crew module 
(Orbiter 099) 


Date 

Event 

Jan. 30 

Start orbiter/external tank/solid rocket booster 
burnout mated vertical ground vibration test 
MSFC 

Jan. 31 

Deliver Shuttle carrier aircraft to DFRC for ferry 
operations 

Jan. 31 

Start left-hand orbital maneuvering system 

Phase I qualification tests, WSTF 

Jan. 31 

Mission Control Center Houston/Goldstone 
Ready for operational flight test early operations 

Feb. 3 

Complete combined systems test, Palmdale 
(Orbiter 102) 

Feb. 16 

Airlock on dock, Palmdale (Orbiter 102) 

Feb. 17 

Fourth solid rocket booster firing, Thiokol 

Feb. 26 

Complete mated vertical ground vibration test 
program at MSFC (Orbiter 101) 

Feb. 28 

Operational readiness date, Shuttle landing site, 
DFRC (Edwards AFB) Runway 23, for first 
manned orbital flight 

March 5 

Complete post-checkout, Palmdale (Orbiter 102) 

March 8 

Complete closeout inspection, final acceptance, 
Palmdale (Orbiter 102) 

March 8 

Orbiter 102 transported overland from Palmdale 
to DFRC (38 miles) 

March 9 

Shuttle carrier aircraft/Orbiter 102 test flight at 
NASA DFRC 

March 17 

Space Shuttle main engine 2005, first flight 
engine delivered to NSTL for acceptance test 
firings 

March 20 

Ferry flight, Shuttle carrier aircraft/Orbiter 102 
from DFRC to Biggs Army Air Base, El Paso, 

TX (3 hr 20 min.) 

March 22 

Ferry flight, Shuttle carrier aircraft/Orbiter 102 
from Biggs Army Air Base to Kelly AFB, San 
Antonio, TX (1 hr, 39 min.) 
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Date 

March 23 

Ferry flight Shuttle carrier aircraft/Orbiter 102 
from Kelly AFB to Eglin AFB, FL (2 hr. 

12 min.) 

June 15 

March 24 

Ferry flight Shuttle carrier aircraft/Orbiter 102 
from Eglin AFB, to KSC (1 hr., 33 min.) 

June 21 

March 30 

Space Shuttle main engine 2007, flight engine 
delivered to NSTL for acceptance test firing 

July 2 

April 6 

Complete Phase I qualification tests, aft reaction 
control system, WSTF 

July 23 

April 10 

Ferry flight, Shuttle carrier aircraft/Orbiter 101 
from MSFC to KSC (1 hr., 52 min.) 


April 16 

Space Shuttle main engine 2006, flight engine 
delivered to NSTL, for acceptance test firing 

Aug. 1 

April 18 

Complete left-hand orbital maneuvering system 
Phase I qualification, WSTF 

Aug. 6 

May 1 

Orbiter 101/external tank/solid rocket boosters 
mated on mobile launch platform transported to 
Launch Complex 39A from VAB at KSC 

Aug. 10 

Aug. 11 

May 4 

Start forward reaction control system Phase I 

May 4 

qualification tests, WSTF 

Fifth static firing, MPTA-098 NSTL, flight 
nozzles 1.5 seconds 

Aug. 12 

Aug. 13 

May 10 

Deliver right-hand orbital maneuvering system/ 
reaction control system from McDonnell Douglas, 
St. Louis, to KSC (Orbiter 102) 

Aug. 14 

May 15 

Deliver left-hand orbital maneuvering system/ 
reaction control system from McDonnell Douglas 
to KSC (Orbiter 102) 

Aug. 15 

May 30 

Deliver external tank used in mated vertical 
ground vibration test from MSFC to Martin 

Marietta for refurbishment 

Aug. 16 

June 12 

Fifth static firing, MPTA-098 NSTL, flight 
nozzles (54 seconds, early cutoff, accelerometer 
filters) 

Aug. 23 


<; ; 


Event 

First solid rocket booster qualification firing, 
Thiokol, UT, 122 seconds; nozzle extension 
severed at end of run as in actual mission; full 
cycle gimbal 

Start assembly crew module (Orbiter 099) 

Six static firing, MPTA-098 NSTL, flight 
nozzles (19 seconds, early cutoff—main fuel 
valve rupture) 

Orbiter 101, external tank, solid rocket boosters 
transported on mobile launch platform from 
Launch Complex 39A to VAB at KSC 
Start long-lead fabrication crew module 
(Orbiter 103) 

Complete limit test (STA 099), Lockheed facil¬ 
ity, Palmdale 

Ferry flight, Shuttle carrier aircraft/Orbiter 101, 
KSC to Atlanta (1 hr, 55 min.) 

Ferry flight, Shuttle carrier aircraft/Orbiter 101, 
Atlanta to St. Louis (1 hr, 50 min.) 

Ferry flight, Shuttle carrier aircraft/Orbiter 101, 
St. Louis to Tulsa (1 hr, 35 min.) 

Ferry flight, Shuttle carrier aircraft/Orbiter 101, 
Tulsa airport to Denver, (2 hr) 

Ferry flight, Shuttle carrier aircraft/Orbiter 101, 
Denver to Hill Air Force Base, Ogden, UT 
(1 hr, 30 min.) 

Ferry flight, Shuttle carrier aircraft/Orbiter 101, 
Ogden to Vandenberg Air Force Base (VAFB) 

(2 hr, 20 min.) 

Ferry flight, Shuttle carrier aircraft/Orbiter 101, 
VAFB to DFRC (1 hr, 10 min.) 

Orbiter 101/Shuttle carrier aircraft demate, 
DFRC 


) 
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Aug. 27 

Start long-lead fabrication, crew module 
(Orbiter 103) 

Aug. 31 

Complete OMS Phase II qualification tests, WSTF 

Aug. 

Second SRB qualification firing, Thiokol 

Sept. 5 

Complete forward RCS Phase I qualification 
tests, WSTF 

Sept. 12 

Start forward RCS Phase II qualification tests, 
WSTF 

Sept. 21 

Start aft RCS Phase II qualification tests, WSTF 

Oct. 5 

Complete setup and thermal tests (STA 099), 
Lockheed Facility, Palmdale 

Oct. 24 

Sixth static firing, MPTA-098, NSTL, flight 
nozzles (scrubbed, hydrogen detector 
oversensitive) 

Oct. 30 

Move Orbiter 101 from DFRC overland to 
Rockwell Palmdale facility (38 miles) 

Nov. 2 

Start OMS left-hand pod Phase II qualification, 
WSTF 

Nov. 3 

Complete Orbiter 102 APU hot fire tests, 
Orbiter Processing Facility, KSC 

Nov. 4 

MPTA-098 static firing, NSTL (10 seconds, 
flight nozzles, SSME LOX turbine, seal cavity 
pressure, high-cutoff steerhorn failure) 

Nov. 7 

Deliver STA-099 from Lockheed facility, 
Palmdale to Rockwell Palmdale for rework 
as second operational orbiter (redesignated 
OV-099) 

Nov. 12 

Complete qualification test OMS engine at 
WSTF 

Dec. 7 

Demate payload bay door, Palmdale, OV-099 

Dec. 17 

Sixth static firing, MPTA-098, NSTL, 

554 seconds (340 seconds at 100% rated power 
level, then 90% at 385 seconds, 80% at 

450 seconds, 70% at 505 seconds; 1 engine 


Date Event 

shutdown-other 2 continued at 70% until 
554 seconds). Pogo and gimbaling tests 
accomplished; stub nozzles 

Dec. 14 Complete demate body flap, Palmdale, OV-099 

Dec. 16 Orbiter integrated test start Orbiter 102, KSC 

Dec. 21 Complete demate elevons, Palmdale, Orbiter 099 

1980 

Jan. 14 Complete orbiter integrated test, Orbiter 102, 

KSC 

Jan. 18 Vertical stabilizer on dock, Fairchild, NY, for 

rework, Orbiter 099 

Jan. 25 Body flap on dock, Downey, Orbiter 099 

Jan. 25 Payload bay doors on dock, Rockwell, Tulsa, 

OK, for rework, Orbiter 099 

Jan. 28 Start instrumentation removal and prepare mid 

fuselage for modification, Palmdale, Orbiter 099 
Feb. 1 Complete aft fuselage demate Palmdale, 

Orbiter 099 for rework on dock, Downey 
Feb. 1 Elevons on dock, Grumman, NY, for rework, 

Orbiter 099 

Feb. 1 Complete aft RCS, Phase II qualification tests, 

WSTF 

Feb. 4 Start instrumentation removal and prepare wing 

for modification, Palmdale, Orbiter 099 
Feb. 8 Demate forward RCS module, Palmdale, 

Orbiter 099 

Feb. 14 Final qualification firing SRB, Thiokol, Utah 

Feb. 15 Complete demate upper forward fuselage, 

Palmdale, Orbiter 099 

Feb. 18 Complete left-hand OMS Phase II qualification 

test, WSTF 

Feb. 20 Complete forward RCS module qualification 

test, WSTF 
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Feb. 23 
Feb. 28 

March 3 
March 20 


March 21 

March 31 
April 16 


May 30 
May 30 


Upper forward fuselage on dock, Downey, for 
rework, Orbiter 099 

Seventh static firing, MPTA-098, NSTL, 

555 seconds (No. 2 engine planned shutdown 
at 520 seconds, throttle down to 70% from 
100%), pogo and gimbaling tests; stub nozzles 
Start detail fabrication, crew module, 

Orbiter 103 

Eighth static firing, MPTA-098, NSTL, 

539 seconds (started at 100%, two engines 
throttled to 70%, then up to 100%, two other 
engines throttled to 70%, then up to 100%; 
all three engines throttled to simulate 3-g 
mission profile, then to 70% and shutdown; 
simultaneous pogo and gimbal tests; stub 
nozzles 

Forward RCS module on dock, Downey, for 
rework, Orbiter 099 

Complete 1/4-scale model tests, Downey 
Ninth static firing, MPTA-098, NSTL 
(No. 2 engine, 4.6 seconds, shutdown due to 
discharge. Overtemperature on high-pressure 
fuel turbo pump; No. 1 and No. 3 shutdown 
at 6 seconds; stub nozzles) 

Complete preparation lower forward fuselage 

modification, Palmdale, Orbiter 099 

Ninth static firing, MPTA-098, NSTL 

(46 seconds into run, throttled to 70% for 

18 seconds, then to 100%, to 95% at 

375 seconds, to 85% at 400 seconds, 83% at 

430 seconds, 75% at 460 seconds; No. 3 

shutdown at 480 seconds, remaining two to 

60% at 490 seconds; No. 2 shutdown at 

565 seconds; No. 1 shutdown by engine cutoff 


Date 

Event 

sensors at 575 seconds). Pogo and gimbal 
tests; stub nozzles 

June 1 

Orbiter 102, Engine 2005 SSME fired for 

520 seconds. NSTL 

June 1 

Start fabrication/assembly wings, Orbiter 103, 

June 5 

Orbiter 102, Engine 2006 SSME fired for 

520 seconds at NSTL 

June 16 

Orbiter 102, Engine 2007 SSME fired for 

520 seconds at NSTL 

June 20 

Start fabrication lower forward fuselage, 

Orbiter 103 

July 12 

Tenth static firing, MPTA-098, NSTL, 
shutdown 105 seconds into firing due to 
burn through in Engine No. 3 fuel prebumer, 
102% thrust, flight nozzles 

July 28 

Start detail fabrication aft fuselage, Orbiter 104 

Aug. 3 

Complete installation SSME’s, Orbiter 102, 

KSC 

Sept. 1 

Start body flap modification Downey, 

Orbiter 099 

Sept. 29 

Start assembly crew module, Orbiter 103 

Oct. 1 

Start fabrication/assembly mid fuselage, 

Orbiter 103 

Oct. 1 

Start fabrication/assembly mid fuselage, 

Orbiter 104 

Oct. 9 & 10 

Removal of SSME’s from Orbiter 102, KSC 
for modifications 

Oct. 11 & 12 

Installation of orbital maneuvering system/ 
reaction control system pods, Orbiter 102, KSC 

Nov. 3 

Start initial systems installation crew module 
Downey, Orbiter 099 

Nov. 3 

External tank mated to solid rogket boosters in 
Vehicle Assembly Building, KSC, for STS-1 
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Event 


Date 


Event 


Nov. 3 

Nov. 4 

Nov. 5 

Nov. 8, 9 
& 10 
Nov. 10 
Nov. 14 
Nov. 16 

Nov. 21 

Nov. 21 

Nov. 24 

Nov. 26 

Dec. 4 
Dec. 4 


Eleventh static firing MPTA-098, NSTL, 
shutdown 20 seconds into firing due to burn 
through in Engine No. 2 nozzle, 102% thrust, 
flight nozzles 

Structural integrity test aft fuselage, 

Orbiter 102, KSC 

External tank mated to solid rocket 
boosters at KSC 

Reinstallation of SSME’s, Orbiter 102, KSC 

Start assembly aft fuselage, Orbiter 103 
Complete modifications, Orbiter 102, KSC 
Complete thermal protection system 
installation, Orbiter 102, KSC 
Complete wing modification, Palmdale, 
Orbiter 099 

Complete modification lower forward 
fuselage, Palmdale, Orbiter 099 
Transfer Orbiter 102 from Orbiter Processing 
Facility to Vehicle Assembly Building, for 
STS-1, KSC 

Mating of Orbiter 102 to external tank and 
solid rocket boosters in Vehicle Assembly 
Building, for STS-1, KSC 

Space Shuttle vehicle power-up in Vehicle 
Assembly Building (Orbiter 102), KSC 

Eleventh static firing MPTA-098, NSTL stub 
nozzles, 591 seconds simulated flight profile, 
started at 100% then to 65% at 37 seconds, 
then to 102% at 65 seconds, then to 
65% at 438 seconds. Engine No. 2 shutdown 
at 442 seconds, remaining two to 65% at 
508 seconds, then shutdown gimbal test 


Dec. 8 
Dec. 12 
Dec. 15-18 
Dec. 19 
Dec. 29 


1981 

Jan. 5 
Jan. 17 


Jan. 22 
Jan. 23 


Jan. 24 
Jan. 29 

Feb. 2 


Feb. 2 


Start initial system installation aft fuselage, 
Orbiter 103 

Complete rework aft fuselage, Downey, 
Orbiter 099 

Space Shuttle interface test in Vehicle 
Assembly Building (Orbiter 102), KSC 
Start preparations for Space Shuttle rollout 
and ordnance installation (Orbiter 102), KSC 
Transfer Space Shuttle aboard mobile launch 
platform from Vehicle Assembly Building to 
Launch Complex 39A for STS-1 (Orbiter 102) 


Emergency egress test 

Twelfth static firing MPTA-098, NSTL, flight 
nozzles, 625 seconds, 100% thrust, simulated 
abort mission profile, No. 1 engine shutdown 
at 239 seconds, remaining two shutdown at 
625 seconds, POGO and gimbal tests. External 
tank test without anti-geyser line to verify 
feasibility of eventually removing it from later 
external tank versions. 

External tank LH 2 load, KSC, Orbiter 102 
Auxiliary power unit confidence run, 

Orbiter 102, KSC, each APU serially run for 
two minutes 

External tank LO 2 load, KSC, Orbiter 102 
Hypergolic load, reaction control system, 
orbital maneuvering system, KSC, Orbiter 102 
Start initial system installation forward 
reaction control system module, Downey, 
Orbiter 099 

Wet countdown demonstration test 
simulations, KSC, Orbiter 102 
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Date 

Feb. 4 

Feb. 13 

Feb. 20 

Feb. 24, 25, 
& 26 
March 1 

March 2 

March 14 
March 27 

March 30 

April 12 

April 20 

April 20 

April 21 

April 22 
June 1 
June 1 
June 1 
July 2 

July 10 


) 


Event 

Start series of countdown demonstration tests 
for flight readiness firing, Orbiter 102, KSC 
Left outboard elevon on dock, Palmdale, 
Orbiter 099 

Flight readiness firing (20 second firing of all 
three SSME’s, Orbiter 102, KSC 
Start mission verification tests, Orbiter 102, 
KSC 

Body flap from Downey to Palmdale, 

Orbiter 099 

Start fabrication/assembly payload bay doors, 
Orbiter 103 

Launch verification tests, Orbiter 102, KSC 
Vertical stabilizer on dock, Palmdale, 

Orbiter 099 

Elevon rework complete, on dock, Palmdale, 
Orbiter 099 

Conduct STS-1, Orbiter 102, launch KSC, 
land Edwards AFB, CA, Runway 23 dry 
lakebed on April 14, 54-1/2 hour mission, 
landed on Orbit 36 

Ferry flight, Orbiter 102, from Edwards AFB, 
CA, to Tinker AFB, OK, 3-1/2 hour flight 
Solid rocket booster stacking began on Mobile 
Launcher Platform for STS-2, KSC 
Ferry flight, Orbiter 102, from Tinker AFB, 
OK, to KSC, 3 hours, 20 minute flight 
External tank for STS-2 on dock, KSC 
Start fabrication elevons, Orbiter 104 
Start fabrication vertical stabilizer, Orbiter 103 
Start fabrication/assembly wings, Orbiter 104 
Upper forward fuselage on dock, Palmdale, 
Orbiter 099 

Payload bay doors on dock, Palmdale, 

Orbiter 099 


Date 


Event 


July 13 
July 14 
July 17 

July 21 
July 24 
July 30 


August 4 
August 26 


October 3 
October 19 

October 19 

October 23 

October 26 

Nov. 2 
Nov. 12 

Nov. 23 

Nov. 23 
Nov. 24 


Start fabrication crew module, Orbiter 104 
Crew module on dock, Palmdale, Orbiter 099 
Complete body flap modification, Downey, 
Orbiter 099 

Aft fuselage on dock, Palmdale, Orbiter 099 
Body flap on dock, Palmdale, Orbiter 099 
Began mating of External Tank to Solid 
Rocket Boosters on Mobile Launcher Platform 
for STS-2, KSC 

Transfer Orbiter 102 from Orbiter Processing 
Facility to Vehicle Assembly Building, KSC 
Transfer Space Shuttle aboard Mobile Launcher 
Platform from Vehicle Assembly Building to 
Launch Complex 39A for STS-2, KSC 
External tanks for STS-3 on dock, KSC 
Start detailed fabrication/assembly, body flap, 
Orbiter 103 

Start detailed fabrication lower forward 
fuselage, Orbiter 104 

Complete airframe modifications, Palmdale, 
Orbiter 099 

Start initial systems installation, crew module, 
Downey, Orbiter 103 

Start initial subsystems test, Palmdale, 

Orbiter 099 

Conduct STS-2, Orbiter 102, launch KSC, 
land Edwards AFB, CA, Runway 23, lakebed, 
landed on Orbit 36, November 14, 54 hour, 

13 minute mission 

Start Solid Rocket Booster stacking on orbit 
Launcher Platform for STS-3, KSC 

Start assembly aft fuselage, Orbiter 104 
Ferry flight, Orbiter 102, from Edwards AFB, 
CA, to Bergstrom AFB, TX, 3-1/2 hour flight 


1 
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Date 


Nov. 

25 

Nov. 

30 

Dec. 

9 

Dec. 

1 1 

Dec. 

19 

Dec. 

31 


1982 (1st Q) 
Jan 4 

Jan 29 

Feb 3 

Feb 15 

Feb 

Feb 

Feb 

March 

March 

March 


) 


Space Transportation System Background Information 


) 


Event 

Ferry flight, Orbiter 102, from Bergstrom AFB, 
TX, to KSC, 3 hour flight 
Start initial system installation, aft fuselage, 
Orbiter 103 

Start fabrication upper forward fuselage, 

Orbiter 104 
Spacelab-1, arrive KSC 

Start mating of External Tank to Solid Rocket 
Boosters on Mobile Launcher Platform for 
STS-3 at KSC 

Forward Reaction Control System Module, on 
dock, Palmdale, Orbiter 099 


Start initial system installation upper forward 
fuselage, Orbiter 103 

Complete initial subsystems test including 

Delta F, Palmdale, Orbiter 099 

Transfer of Orbiter 102 from OPF to VAB for 

STS-3 

Start assembly crew module, Orbiter 104 
Mid fuselage on dock Palmdale, Orbiter 103 
Transfer of Space Shuttle from VAB to launch 
complex 39A for STS-3 

Complete main propulsion test program NSTL, 
Miss. 

Orbital maneuvering system/reaction control 
system pods on dock, Palmdale, Orbiter 099 
Conduct STS-3, Orbiter 102, Launch KSC, 
land Edwards AFB, CA lake bed runway 23 

Start initial systems installation forward 
reaction control system module, Orbiter 103 


Date 

March 

March 

1982 (2nd Q) 


1982 (3rd Q) 


Event 

Start initial systems installation, wings, 
Orbiter 103 

Elevons on dock, Palmdale, Orbiter 103 


Complete subsystems test, Palmdale, 

Orbiter 099 

Lower forward fuselage on dock, Palmdale, 
Orbiter 103 

Complete final acceptance test, Palmdale, 
Orbiter 099 

Wings on dock, Palmdale, Orbiter 103 

Start final assembly and closeout installation, 

Palmdale, Orbiter 103 

Upper forward fuselage on dock, Palmdale, 

Orbiter 103 

Start fabrication forward reaction control 
system module, Orbiter 104 
Complete post checkout, Palmdale, Orbiter 099 
Vertical stabilizer on dock, Palmdale, 

Orbiter 103 

Complete configuration inspection, Palmdale, 
Orbiter 099 

Orbiter 099 on dock, KSC 


Conduct STS-4, Orbiter 102, launch KSC, 
land KSC 

Orbiter 102, KSC, available for mini¬ 
modification to STS-5 

Start assembly payload bay doors, Orbiter 104 
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Date Event 

1982 (3rd Q) 

Payload bay doors on dock, Palmdale, 

Orbiter 103 

Orbital maneuvering system/reaction control 
system pads on dock, KSC, Orbiter 099 
Aft fuselage on dock, Palmdale, Orbiter 103 
Complete acceptance at KSC, Orbiter 102 
Mini-modification for STS-5 
Authority to proceed on payload bay OMS kit 
Authority to proceed on docking module 
Start fabrication/assembly vertical stabilizer, 
Orbiter 104 

Crew module on dock, Palmdale, Orbiter 103 
Body flap on dock, Palmdale, Orbiter 103 
Conduct STS-5, Orbiter 102, first operational 
flight, launch and land KSC 
Start fabrication orbital maneuvering system/ 
reaction control system pods, Orbiter 104 
Orbital maneuvering system/reachon control 
system pods on dock, Palmdale, Orbiter 103 
Forward reaction control system module, 
on dock, Palmdale, Orbiter 103 

1983 (1st Q) 

Conduct STS-6, Orbiter 099, launch and 
land KSC 

Start initial system installation aft fuselage, 
Orbiter 104 

Complete final assembly and closeout 
installation, Palmdale, Orbiter 103 

Start initial test, Palmdale, Orbiter 103 
Start fabrication/assembly body flap, 

Orbiter 104 


Date Event 

Start initial system installation crew module, 
Orbiter 104 

1983 (2nd Q) 

Mid fuselage on dock, Palmdale, Orbiter 104 
Complete initial subsystems including Delta F 
test, Palmdale, Orbiter 103 
Start initial systems installation upper forward 
fuselage, Orbiter 104 

Start initial systems installation lower forward 
fuselage, Orbiter 104 

Start initial system installation mid fuselage, 
Orbiter 104 

Elevons on dock, Palmdale, Orbiter 104 
Wings on dock, Palmdale, Orbiter 104 

1983 (3rd Q) 

Start initial system installation forward reaction 
control system module, Orbiter 104 
Complete subsystems test, Palmdale, Orbiter 103 
Complete final acceptance test, Palmdale, 

Orbiter 103 

Vertical stabilizer on dock, Palmdale, 

Orbiter 104 

Lower forward fuselage on dock, Palmdale, 
Orbiter 104 

Complete post checkout, Palmdale, Orbiter 103 
Start final assembly and closeout installation, 
Orbiter 104 

Orbital maneuvering system/reaction control 
system pods on dock, KSC, FL, Orbiter 103 
Upper forward fuselage on dock, Palmdale, 
Orbiter 104 

Start initial system installation vertical 


528 


) 


) 


) 




) 



Date 


1983 (4th Q) 


1984 (1st Q) 


1984 (2nd Q) 


Space Transportation System Background Information 



Event 


Date 


Event 


stabilizer, Orbiter 104 

Complete configuration inspection, ready for 
acceptance, Palmdale, Orbiter 103 
Orbiter 103, on dock, KSC 


Aft fuselage on dock, Palmdale, Orbiter 104 
Payload bay doors on dock, Palmdale, 
Orbiter 104 


Body flap on dock, Palmdale, Orbiter 104 
Orbital maneuvering system/reaction control 
system pods on dock, Palmdale, Orbiter 104 
Crew module on dock, Palmdale, Orbiter 104 


Forward reaction control system module 
on dock, Palmdale, Orbiter 104 
Complete final assembly and closeout 


installation, Palmdale, Orbiter 104 
Start initial subsystems test, Palmdale, 
Orbiter 104 


1984 (3rd Q) 

Complete initial subsystems test including 
Delta F, Palmdale, Orbiter 104 

1984 (4th Q) 

Complete subsystems test, Palmdale, 

Orbiter 104 

Complete final acceptance test, Palmdale, 
Orbiter 104 

Complete post checkout, Palmdale, 

Orbiter 104 

Orbital maneuvering system/reaction control 
system pods on dock, Orbiter 104, KSC 
Complete configuration inspection, ready 
for acceptance, Palmdale, Orbiter 104 
Orbiter 104 on dock, KSC 
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Astronaut Crews 



JOHN W. YOUNG, veteran of four space flights, was the 
spacecraft commander for the Space Shuttle orbiter's first flight 
into space. He has logged 533 hours and 33 minutes in space 
flight on the Gemini 3 and 10 missions and the Apollo 10 and 
16 flights to the moon. A graduate of Georgia Institute of 
Technology in aeronautical engineering. Young entered U.S. 
Naval service and after a year of destroyer duty he was accepted 
and completed flight training. He is a graduate of the Navy's 
Test Pilot School and was stationed at the Naval Air Test Center 
for three years prior to entering the Astronaut Corps in 1962. 
He retired from the Navy in 1976. Young was assigned 
responsiblity for the Space Shuttle Branch of the Astronaut Office in 1973, and in 
1975 was named as chief of the Astronaut Office. Young is a Fellow of the American 
Astronautical Society (AAS), Associated Fellow of the Society of Experimental Test 
Pilots (SETP) and the American Institute of Aeronautics and Astronautics (AIAA). He 
has two NASA Distinguished Service Medals, two NASA Exceptional Service Medals, 
the JSC Certificate of Commendation, the Navy Astronaut Wings, two Navy 
Distinguished Service Medals, three Navy Distinguished Flying Crosses, the Georgia 
Tech Distinguished Alumni Award (1965) and the Distinguished Service Alumni Award 
(1972), the SETP Iven C. Kincheloe Award, the AAS Flight Achievement Award, and 
the AIAA Haley Astronautics Award. Young was born in San Francisco, Calif., 
Sept. 24, 1930, is married and has two children. He is 5'9" in height, weighs 165 
pounds, and has green eyes and brown hair. 


JOE H. ENGLE was the spacecraft commander for the Space 
Shuttle orbiter's second flight into space. He earned his 
astronaut wings as an Air Force pilot of the X-15. Three of his 
16 flights in the high-speed, high-altitude research craft 
exceeded 50 miles in altitude. He was spacecraft commander 
on the Shuttle ALT flights. Engle graduated from the 
University of Kansas with a BS in aeronautical engineering and 
entered the Air Force (he presently is a colonel). Following 
duty with fighter aircraft squadrons, he was accepted and 
graduated from the USAF Experimental Test Pilot School and 
the Air Force Aerospace Research Pilot School. As an Air 
Force test pilot, he was assigned to the X-15 and during his career has flown more than 
130 different types of aircraft. He has been awarded the NASA Exceptional Service 
Medal, the Distinguished Flying Cross, was named the Air Force Association's 
Outstanding Young Officer (1964), was selected by the U.S. Junior Chamber of 
Commerce as one of the Ten Outstanding Young Men in America, and received the 
AlAA's Lawrence Speery Award. He is a member of SETP. Engle was born in Abilene, 
Kan., Aug. 26, 1932, is married and has two children. He is 6' in height, weighs 155 
pounds, and has hazel eyes and blond hair. 


ROBERT L. CRIPPEN, one of the research pilots selected for 
the U.S. Air Force's Manned Orbiting Laboratory, was the 
spacecraft pilot for the first Space Shuttle orbiter flight into 
space. He has logged more than 4,275 hours of flying 
time—most of it in jet-powered aircraft—as a U.S. Navy pilot 
and astronaut. A graduate of the University of Texas in 
aerospace engineering, Crippen entered naval service (he 
presently is a commander) and was a carrier pilot. He 
completed the U.S. Air Force's Aerospace Research Pilot 
School at Edwards AFB and remained as an instructor until he 
was selected for the Manned Orbiting Laboratory program in 
1966. He transferred to the NASA Astronaut Office in 1969 and was a crew member 
of the Skylab Medical Experiments Altitude Test—a 56-day simulation of the Skylab 
mission. He was a member of the suport crew for Skylab 2, 3, and 4, and the ASTP 
mission. He has been awarded th6 NASA Exceptional Service Medal and the JSC Group 
Achievement Award. Crippen was born in Beaumont, Tex., Sept. 11, 1937, is married 
and has three children. He is 5'10" in height, weighs 160 pounds, and has brown hair 
and eyes. 


RICHARD H. TRULY was the spacecraft pilot for the Space 
Shuttle orbiter's second flight into space. He was an orbiter 
pilot during the successful Approach and Landing Test 
program, and as a naval pilot and astronaut has logged nearly 
5,000 hours in jet aircraft. He graduated from the Georgia 
Institute of Technology in aeronautical engineering and 
entered naval flight training. Following service as a carrier 
pilot. Truly completed the USAF Aerospace Research Pilot 
School at Edwards and was subsequently assigned there as an 
instructor. In 1965 he was selected as a research pilot on the 
Manned Orbiting Laboratory program and in 1969 was 
assigned to the NASA Astronaut Office. Truly was a member of the Skylab support 
crew and served in a similar capacity for the ASTP flight. He has been awarded two 
NASA Exceptional Service Medals. Truly was born in Fayette, Miss., Nov. 12, 1937, is 
married and has three children. He is 5'8" in height, weighs 150 pounds, and has brown 
hair and eyes. 
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JACK R. LOUSMA is the spacecraft commander for the Space 
Shuttle orbiter's third flight into space. He has 1,427 hours and 
9 minutes of space flight as crew member of Skylab 3. He also 
has spent 11 hours and 2 minutes in extravehicular activities. 
Lousma graduated from the University of Michigan with a 
degree in aeronautical engineering. He entered naval flight 
training and served as a Marine Corps pilot (he presently is a 
Lt. Col. in the USMC). He was selected an astronaut in 1966 
and served as a support crew member for the Apollo 9, 10, and 
13 missions. He was a backup pilot for ASTP. Lousma also has 
an aeronautical engineering degree from the U.S. Naval 
Postgraduate School and an honorary doctorate of astronautical science from the 
University of Michigan. He has the NASA Distinguished Service Medal, the JSC 
Certificate of Commendation, the Navy's Distinguished Service Medal and Navy 
Astronaut Wings, the City of Chicago Gold Medal, the Robert J. Collier Trophy, the 
Marine Corps Aviation Association's Exceptional Achievement Award, the FAI's V.M. 
Komarov Diploma, the Dr. Robert H. Goddard Memorial Trophy, the AIAA Octave 
Chanute Award, and the AAS Flight Achievement Award. Lousma was born in Grand 
Rapids, Mich., Feb. 20, 1936, is married and has three children. He is 6' in height, 
weighs 195 pounds, has blond hair and blue eyes. 




/ 


VANCE D. BRAND, Shuttle spacecraft commander, has logged 
j 217 hours and 28 minutes in space flight as command module 
I pilot of the Apollo-Soyuz Test Project. A graduate of the 
University of Colorado in business (1953) and aeronautical 
engineering (1960), Brand was commissioned a naval aviator 
and served as a Marine Corps fighter pilot until 1957. He was 
with the Marine Reserve and Air National Guard until 1964. He 
joined Lockheed Aircraft as a flight test engineer in 1960, and 
following completion of the Navy's Test Pilot School was 
assigned to Palmdale, Calif., as an experimental test pilot on the 
F-104. He was selected as an astronaut in 1966, and was a crew 
member of the Apollo 8 thermal-vacuum chamber program. He was a support crewman 
on Apollo 8 and 13, and was backup pilot for Apollo 15 and the Skylab 3 and 4 
missions. Brand is a Fellow, American Astronautical Society, Associate Fellow of 
AIAA, and a member of SETP. He has the NASA Distinguished and Exceptional 
Service Medals, the JSC Certificate of Commendation, the Richard Gottheil Medal, the 
Wright Brothers International Manned Space Flight Award, the VFW National Space 
Award, the FAI Yuri Gagarin Gold Medal, the AIAA Special Presidental Citation and 
the Haley Astronautics Award, the AAS's Flight Achievement Award, and the 
University of Colorado's Alumnus of the Century award. Brand was born in Longmont, 
Colo., May 9, 1931, is married and has four children. He is 5'11" in height, and weighs 
175 pounds. He has blond hair and gray eyes. 




C.G. (GORDON) FULLERTON is the spacecraft pilot for 
Space Shuttle orbiter's third flight into space. He served as the 
Enterprise's pilot on the Approach and Landing Test program. 
A graduate of California Institute of Technology with both 
bachelor and master of science degrees in mechanical engineer¬ 
ing, Fullerton entered active duty with the U.S. Air Force (he 
is presently a lieutenant colonel). He has served as both an 
interceptor and bomber pilot and is a graduate of the USAF 
Aerospace Research Pilot School. He was a test pilot at 
Wright-Patterson Air Force Base prior to being selected for the 
Manned Orbiting Laboratory program. Fullerton transferred to 
the Astronaut Office in 1969, and served on the support crews for Apollo 14 and 17. 
He is a member of SETP and an honorary member of the National World War 11 Glider 
Pilots Assn. Fullerton has been awarded the NASA Exceptional Service Award, the JSC 
Group Achievement Award, and the USAF Commendation and Meritorious Service 
medals. He was born in Rochester, N.Y., Oct. 11, 1936. Fullerton is married, and has 
two children. He is 6' in height, weighs 165 pounds, and has blond hair and blue eyes. 



ROBERT F. OVERMYER is presently assigned engineering 
development duties on the Space Shuttle program. He is 
currently assigned to the Development Flight Test Missions 
group of the astronaut office. His first assignment with NASA 
was engineering development duties on Skylab. Overmeyer 
then served on the support crews for the Apollo 17 and 
Apollo-Soyuz Test Project. In 1976 he was the prime T-38 
chase pilot for the Approach and Landing Test program on 
orbiter free flights 1 and 3. Overmeyer was selected as a NASA 
astronaut when the U.S. Air Force Manned Orbiting 
Laboratory program was canceled in 1969. Colonel Overmeyer 
entered active duty with the Marine Corps in January 1958. After flight training, 
several squadron tours, and graduate school, he attended the Air Force Test Pilots 
school in 1965. He was selected as an astronaut for the U.S. Air Force Manned 
Orbiting Laboratory program in 1966. He is a member of the Society of Experimental 
Test Pilots. Overmeyer was born in Lorain, Ohio, July 14, 1936, is married and has 
three children. He is 5'11-3/4'' and weighs 180 pounds. He has brown hair and blue 
eyes. 









Astronaut Crews 



THOMAS K. MATTINGLY, II is the backup commander for 
the STS-3 flight. He was also the backup commander for the 
STS-2 flight. From 1979 to 1981 he headed the astronaut 
ascent/entry group. Mattingly was previously assigned as 
technical assistant for flight test to the manager of the 
Development Flight Test program. He was the head of the 
astronaut office support to the STS-program from 1973 to 
1978. Mattingly was the designated command module pilot for 
the Apollo 13 flight, but was removed from flight status 
72 hours prior to the scheduled launch due to exposure to the 
german measles. He subsequently served as command module 
pilot of Apollo 16, April 16 through April 27, 1972. With the completion of his first 
space flight Captain Mattingly has logged 265 hours and 51 minutes in space—1 hour 
and 13 minutes of which were spent in extravehicular activity (EVA). He has logged 
6,300 hours of flight time —4,130 hours iri jet aircraft. Mattingly is one of the 19 
astronauts selected by NASA in April 1966. Prior to reporting for duty as an 
astronaut, he was a student at the Air Force Aerospace Research Pilot school. 
Mattingly began his naval career as an ensign in 1958 and received his wings in 1960. 
He was then assigned to the USS Saratoga from 1960 to 1963 flying AIH aircraft and 
then served aboard the USS Franklin D. Roosevelt where he flew VAH-11 aircraft for 
two years. He served as a member of the astronaut support crews for the Apollo 8 and 
11 missions. Mattingly is an Associate Fellow, American Institute of Aeronautics and 
Astronautics; Fellow, American Astronautical Society; and Member, Society of 
Experimental Test Pilots, and the U.S. Naval Institute. He has the NASA Distinguished 
Service Medal, the JSC Group Achievement Award, the Navy Distinguished Service 
Medal, and Navy Astronauts Wings, the SETP Ivan C. Kincheleo Award, the Delta Tau 
Delta Achievement Award, the Auburn Alumni Engineers Council Outstanding 
Achievement Award, the A AS Flight Achievement Award, the AIAA Haley 
Astronautics Award, and the Federation Aeronautique Internationale V.M. Komarov 
Diploma. Mattingly was born in Chicago, Illinois, March 17, 1936, is married and has 
one child. He is 5'10” and weighs 140 pounds. He has brown hair and blue eyes. 



HENRY W. HARTSFIELD, JR. is the backup pilot for the 
STS-3 flight. He was also the backup pilot for the STS-2 flight. 
Hartsfield was a member of the Development Flight Test 
missions group of the astronaut office and was responsible for 
supporting the development of the Space Shuttle entry flight 
control system and its associated interface. In 1977, he retired 
from the U.S. Air Force with more than 22 years of service, 
but continues his assignment as a NASA astronaut in a civilian 
capacity. Hartsfield became a NASA astronaut in 1969. He was 
a member of the astronaut support crew for Apollo 16 and 
Skylab 2, 3, and 4 missions. Hartsfield was assigned in 1966 to 
the USAF Manned Orbiting Laboratory program as an astronaut until the program was 
canceled in 1969, when he was reassigned to NASA. He has logged over 5,270 flying 
hours—of which over 4,700 hours are in the F-86, F-100, F-104, F-105, F-106, T-33 
and T-38A. Hartsfield received his commission through the Reserve Officers Training 
program at Auburn University. He entered the Air Force in 1955, and his assignments 
included a tour with the 53rd Tactical Fighter Squadron in Germany. He is also a 
graduate of the USAF Test Pilot school at Edwards Air Force Base, California and was 
an instructor there prior to his assignment as an astronaut in the USAF Manned 
Orbiting Laboratory program. He was awarded the Air Force Meritorious Service Medal 
and the General Thomas D. White Space Trophy. Hartsfield was born in Birmingham, 
Alabama, November 21, 1933, is married and has two children. He is 5'10” and weighs 
165 pounds. He has brown hair and hazel eyes. 
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MAJOR GENERAL JAMES A. ABRAHAMSON is the 

Associate Administrator for NASA's Office of Space 
Transportation Systems, on assignment from the Air Force. He 
was named to this position on November 1, 1981 and is 
responsible for the management of the nation's Space Shuttle 
program. Previously he was Deputy Chief of Staff/Systems at 
Headquarters Air Force Systems Command, since July 1980. 
From 1976 to 1980, he was program director for the F-16 Air 
Combat Fighter Program at the Aeronautical Systems Division 
at Wright Patterson. He was an Inspector General for the Air 
Force Systems Command from 1974 to 1976. General 
Abrahamson was commissioned a second lieutenant in the U.S. Air Force in November 
1955 and completed pilot training at Laughlin Air Force Base, Texas in May 1957. 
Initial assignments included flight and other instructor duties. In August 1961, he was 
assigned as spacecraft project officer on the VELA Nuclear Detection Satellite 
program. From October 1964 to August 1968 he served two temporary tours of duty 
in Southeast Asia where he flew 49 combat missions. He became an Air Force test pilot 
in 1967. After years spent on the Air Force Manned Orbiting Laboratory Program and 
at the White House National Aeronautics and Space Council, he became director for 
the TV guided air-to-ground Maverick missile program, Air Force Systems Command, 
at Wright Patterson Air Force Base. He commanded the 4950th Test Wing at Wright 
Patterson from June 1973 until March 1974. General Abrahamson graduated from the 
Massachusetts Institute of Technology in 1955. In 1961 he earned a Master of Science 
degree in Aeronautical Engineering. He is a command pilot with more than 3,000 hours 
in conventional and jet fighter aircraft. His military decorations include the 
Distinguished Service Medal, Legion of Merit with one oak leaf cluster. Meritorious 
Service Medal, Air Force Outstanding Unit Award ribbon and the Air Force 
Organizational Excellence Award. 


L. MICHAEL WEEKS is deputy associate administrator of 
Space Transportation Systems Acquisition at NASA 
Headquarters, a position he has held since November 1979. 
In this position, he will play a key role in the development and 
acquisition of NASA's Space Transportation System, including 
the Space Shuttle, its upper stages, associated ground facilities, 
and equipment and system improvements. From 1975 to 1979, 
he was the manager of Advanced Systems Development for 
the Reentry and Environmental Systems Division of General 
Electric. Before that, he was vice president and general 
manager of the Missile and Space Division of LTV Corporation 
and was associated with' the Perkin-Elmer Corporation in NASA's Space Telescope 
program. Weeks began his career at McDonnel Aircraft Corporation in St. Louis, Mo., 
on the Mercury program. He helped create the U.S. Air Force Manned Orbital 
Laboratory concept when he was with the Aerospace Corporation. He is an associate 
fellow of the American Institute of Aeronautics and Astronautics, and a member of the 
National Securities Association, the American Defense Preparedness Association, and 
the Technical Marketing Society. He received his BS degree from Iowa State 
University and an MS in applied mechanics from Washington University, 
St. Louis, Mo. 
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DAVID R. BRAUNSTEIM is deputy associate administrator 
of management in the Office of Space Transportation Systems 
at NASA Headquarters. He is responsible for planning and 
implementing management systems in both NASA 
Headquarters and field centers that are related to overall 
operation of Space Transportation Systems. Before joining 
NASA, he was director of program management in the 
Defense Advanced Rsearch Projects Agency (DARPA). Before 
that, he participated in the president's executive interchange 
program on a one-year assignment at Rockwell International's 
Financial Management and Marine Systems Division. From 
1966 to 1974, he worked for the U.S. Navy Department in Washington, D.C. From 
1965 to 1966, he was a marine engineer in Machinery Systems Division's Marine 
Engineering Laboratory in Annapolis, Md. He began his civil service career at the 
New York Naval Shipyard in 1958. He received a BSE from the University of 
Michigan and an MBA from George Washington University. 


AARON COHEN is manager of the Space Shuttle Orbiter 
Project Office for Johnson Space Center. He is responsible for 
design, development, production, and testing of the orbiter and 
for providing direction to organizations within JSC, other 
NASA centers, and contractors to ensure orbiter technical and 
schedule compliance. He joined NASA at JSC in 1962 as a 
member of the Apollo Spacecraft Program Office and 
subsequently held varied executive posts on the program. 
He was appointed Command and Service Module (CSM) 
manager in 1970, directing CSM efforts on both Apollo and 
Skylab programs until his appointment to the Space Shuttle 
post in 1972. Cohen has earned two NASA Exceptional Service Awards, the NASA 
Certificate of Commendation, and the NASA Distinguished Service Medal. He has a BS 
in mechanical engineering from Texas A&M and an MS in applied mathematics from 
Stevens Institute of Technology. 
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I DONALD K. (DEKE) SLAYTON is manager for the 
I development flight tests of the Space Shuttle program at 
I Johnson Space Center. He was previously manager of 
I Approach and Landing Test, Space Shuttle Program Office, at 
I JSC and was responsible for planning and implementing the 
I test program. Slayton was docking module pilot in the joint 
I Apollo-Soyuz Test Project in July 1975. He was director of 
I Flight Crew Operations at JSC from November 1963 until he 
was restored to full flight status and eligible for manned space 
flights. Named as one of the original Mercury astronauts in 
April 1969, Slayton was removed from flight status due to a 
heart condition. He is a former Air Force and Air National Guard pilot and graduated 
from the Air Force Test Pilot School in 1955. Slayton served as a test pilot from 
1956 until being named to the astronaut corps in 1959. He received a BS degree in 
aeronautical engineering from the University of Minnesota. 



GLYNN LUNNEY is manager of the Shuttle Payload 
Integration and Development Program Office at Johnson Space 
Center. From 1976 to 1977, Lunney was temporarily assigned 
to NASA Washington Headquarters as deputy associate 
administrator for Space Flight. As Apollo spacecraft program 
manager, Lunney was also responsible for JSC's Skylab 
activities; his leadership in the Apollo-Soyuz Test Project 
earned him a second NASA Distinguished Service Medal. 
His first was awarded for service as chief of the Flight 
Director's Office at JSC during the Apollo program from 1968 
to 1972. Lunney joined NASA in 1958 as an aerodynamics 
research engineer after graduating (BS in aeronautical engineering) from the University 
of Detroit. He was assigned to the NASA Space Test Group at Langley Research 
Center, Va., in 1959 and in 1962 was named head of the Mission Logic and Computer 
Hardware Section at JSC. He headed the Flight Dynamics Branch before being named 
chief of the Flight Director's Office. He also has been awarded NASA's Outstanding 
Performance Award and the Exceptional Service Medal. He received the AIAA 
Lawrence Sperry Award in 1970 and the Authur S. Fleming Award in 1974. 
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JERRY C. BOSTICK is deputy manager of Shuttle 
Transportation Systems Operations at Johnson Space Center, 
where he shares responsibilities with the manager for the 
| planning of Space Transportation Systems operations and for 
J the integration of all payloads and payload carriers that will fly 
aboard the Space Shuttle. His responsibilities include defining 
standard payload interfaces with the Shuttle, analyzing 
payload requirements vis-a-vis Shuttle performance, 
I manifesting payloads, and managing Space Transportation 
(Systems planning efforts associated with the Department of 
Defense activities. From 1976 to 1979, he was manager of the 
Payload Deployment and Retrieval Systems Office. From 1975 to 1976, he was chief 
of the Technical Planning Office at JSC. From 1974 to 1975, he was with the Office 
of Energy Programs. He was assistant executive secretary to the Office of the 
Administrator at NASA Headquarters and served as staff assistant to the associate 
deputy administrator from 1973 to 1974. He served as an aerospace engineer at the 
Mission Planning and Analysis Division of JSC from 1962 to 1965, as a Flight 
Dynamics Officer from 1965 to 1966, as head of Flight Dynamics Officer Section from 



1966 to 1968, and as chief of the Flight Dynamics Branch from 1968 to 1973. 
He joined NASA in 1962 at Langley Research Center, Hampton, Va., as an aerospace 
engineer. He received a BS in civil engineering from Mississippi State University 
in 1 962. 


RICHARD G. SMITH is director of NASA's John F. Kennedy 
Space Center. He was appointed to this position September 
1979. Smith became a member of the rocket research and 
development team at Redstone Arsenal, Ala., in June 1951. 
He transferred to NASA in July 1960, when the Development 
Operations Division of the Army Ballistic Missile Agency 
became the nucleus for establishing the George C. Marshall 
Space Flight Center. He held various assignments in the former 
Guidance and Control Laboratory and in the Systems 
Engineering Office before being appointed deputy manager and 
later manager of the Saturn program. In January 1974, Smith 
became director of Science and Engineering, where he served until he was named 
deputy director of the MSFC in 1974. In August 1978, he accepted a one-year 
assignment as deputy associate administrator of Space Transportation Systems at 
NASA Headquarters. He served as director of the Skylab task force appointed by the 
NASA administrator to represent NASA before and after the reentry of Skylab. He 
received the NASA Medal for Exceptional Service in 1969 and the NASA Medal for 
Distinguished Service in 1973 for his contributions to the Apollo lunar landing 
program and the Skylab program. He received his BS in electrical engineering from 
Auburn in 1951. 
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GEORGE F. PAGE is the director of Shuttle Operations at 
NASA's John F. Kennedy Space Center. He is responsible for 
the management and technical direction of the test, checkout, 
launch, and landing operations of the Space Shuttle at KSC. 
This responsibility includes the combined orbiter, external 
tank, and solid rocket boosters as they are assembled and 
tested for launch. Since joining NASA in June 1963 as a 
spacecraft test conductor for the Gemini program. Page has 
served as chief spacecraft test conductor for Gemini and 
Apollo launch operations, chief of Spacecraft Operations 
Division for Apollo, Skylab, and Apollo-Soyuz Test Project 
(ASTP) launch operations, director of the Expendable Vehicle Operations Directorate, 
and director of Cargo Operations. Before joining NASA, he served for five years as a 
launch operations engineer with General Dynamics Corporation and for six years as a 
flight test engineer with Westinghouse Electric Corporation. He has received two 
NASA Exceptional Service Medals for his part in the Apollo 8 and 11 operations and 
NASA's Distinguished Service Medal for his role in the 1975 ASTP operations. 
He received a BS degree in aeronautical engineering from Pennsylvania State 
University in 1952. 


DR. ROBERT H. GRAY is manager of the Space Shuttle 
Projects Office at Kennedy Space Center, a position he has 
held since 1973. He is responsible for operations planning, 
facilities preparation, and ground equipment acquisition for 
launch, landing, and refurbishment of the Space Shuttle 
Transportation System, which includes the Space Shuttle, 
Spacelab, upper stages, and other Shuttle payloads. Earlier, 
Dr. Gray was KSC deputy director of Launch Operations and 
director of Unmanned Launch Operations, directing more 
flights (178) than any engineer in the free world. He joined 
NASA in 1958 after three years as the Vanguard launch 
director and deputy manager of the Vanguard Group at Cape Canaveral for the Naval 
Research Laboratory. Gray was named chief of the Goddard Space Flight Center Field 
Projects Branch in 1959, a post he held until joining the KSC organization in 1965. 
Honors accorded Gray include the Navy's Outstanding Performance Award for the 
Vanguard program and, from NASA, the Distinguished Service Award and Exceptional 
Service Medal. Gray graduated from Allegheny College, Pa., with a BS in physics; he 
received an honorary doctorate of science from Allegheny in 1968. 





GEORGE B. HARDY is manager of the Solid Rocket Booster 
project. Space Shuttle program, for Marshall Space Flight 
Center. He served earlier as manager of Program Engineering 
and Integration for Skylab, assistant manager of the Saturn IB 
Launch Vehicle project, and deputy project manager for the 
Saturn l-IB project. Hardy began his professional career in 
1952 with E.l. du Pont in Georgia; he moved to the Redstone 
Arsenal in 1958 and transferred to MSFC in 1962 as a project 
engineer. He graduated from the Georgia Institute of 
Technology in 1952 with a BS in civil engineering. 



ROBERT E. LINDSTROM has been manager of the Shuttle 
Projects Office at Marshall Space Flight Center since March 
1974, after serving as deputy manager for the preceding 
two years. From 1970 to 1972, he was deputy director of 
MSFC's Process Engineering Laboratory. Before 1960, he was 
with the Army Ballistic Missile Agency as a Saturn project 
engineer and as project engineer for the Jupiter C vehicle that 
launched Explorer I. He joined MSFC in 1960 as manager of 
the Saturn l-IB program. Lindstrom left government 
employment in 1963 to serve in top posts in industry but 
rejoined MSFC in 1970. He holds numerous awards, including 
NASA's Exceptional Service Medal and the Director's Commendation Certificate. 
He received a BS in ceramic engineering from the University of Illinois. 
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JAMES B. ODOM is manager of the External Tank project. 
Space Shuttle program, at Marshall Space Flight Center. Odom 
began his professional career in 1955 with Chemstrand 
Corporation, Decatur, Ala. He moved in 1956 to the Army 
Ballistic Missile Agency and in 1959 joined the organization 
that became MSFC in 1960. He has been associated with earth 
satellite programs, lunar unmanned probes, and the Apollo 
program. Odom graduated from Auburn University with a BS 
in mechanical engineering in 1955. 



JAMES R. (BOB) THOMPSON JR. is manager of the Space 
Shuttle Main Engine project at Marshall Space Flight Center. 
He served earlier as chief of MSFC's Man/Systems Integration 
Branch Astronautics Laboratory. Thompson joined the 
propulsion research development team at MSFC in 1963, 
where he was responsible for component design and 
performance analysis of the engine system on Saturn launch 
vehicles. He is a graduate of Georgia Institute of Technology 
(1958) and the University of Florida (1963) with a BS in 
aeronautical engineering and an MS in mechanical engineering. 
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OTHA C. JEAN is manager of the Spacelab Payloads Project 
Office at NASA's Marshall Space Flight Center. He was 
appointed to this position in February 1976. He is responsible 
for defining and managing the first two Spacelab payloads to 
be carried into earth orbit. He had previously served as deputy 
director of the center's Program Development Directorate. 
He joined the rocket research and development team at 
Redstone Arsenal in 1957 and transferred to NASA's MSFC in 
July 1960, where he worked in the Aero-Astrodynamics 
Laboratory as its deputy director for five years. He graduated 
from Middle Tennessee University with a BS in mathematics in 
1950 and an MS in education in 1951. 


JOHN W. THOMAS is manager of the Spacelab Program Office 
at NASA's Marshall Space Flight Center (MSFC). He was 
appointed to this position in December, 1980, after serving for 
over a year as deputy manager of this office. Thomas began his 
professional career in 1960 as an engineer in the Field Support 
Division of the Army Ballistic Missile Agency at Redstone 
Arsenal, transferring to NASA in December 1961. At MSFC, 
Thomas served in various engineering and technical manage¬ 
ment positions with increasing responsibilities. He was involved 
in the development and certification of the H-1 rocket engine 
and in mission planning for the Skylab space station, and, in 
1974, he was appointed project engineer for the structural and mechanical system of 
Spacelab. In 1979, he became deputy chief of the Spacelab Systems Division in the 
Systems Analysis and Integration Laboratory, where he served until he was appointed 
chief engineer for the Spacelab Program in 1976. He subsequently served as deputy 
manager of the Spacelab Program Office before assuming his present duties. Thomas 
received the NASA Exceptional Service Award in 1974 for his contributions to the 
Skylab Program. He is a registered professional engineer in the State of Alabama, 
having received a BS in mechanical engineering from Auburn University, Auburn, 
Alabama in 1960. 
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DR. FRIDTJOF A. SPEER has been manager of the Space 
Telescope Project Office at NASA's Marshall Space Flight 
Center since February 1980. He was previously the manager of 
the Space Sciences Project Office, which had management 
responsibility for the high-energy astronomy observatory 
(HEAO) and the gravitational red-shift space probe 
experiment. He served from March 1955 to June 1960 as chief 
of the Flight Evaluation Branch of the Guided Missile 
Development Division and the Development Operations 
Division of the Army Ballistic Missile Agency at Redstone 
Arsenal, Ala. He transferred to NASA in July 1960, when the 
Development Operations Division became the nucleus for the George C. Marshall 
Space Flight Center. Dr. Speer directed the Flight Evaluations and Operations Studies 
Division of the Aero-Astrodynamics Laboratory, then became manager of the Mission 
perations Office in charge of the center's participation in launch and flight operations 
for the Saturn launch vehicle during the Apollo program. He received NASA's 
Exceptional Service Medals in January and September 1969 for his work on the 
Apollo 8 and 11 programs. Dr Speer received the Holger N. Toftoy Award from the 
Alabama section of the American Institute of Aeronautics and Astronautics in 
February 1978 for his outstanding management of the HEAO program. In July 1978, 
he was awarded the NASA Outstanding Leadership Medal by the NASA administrator 
for the HEAO-1 program. In October 1979, the American Astronomical Society 
presented him the W. Randolph Lovelance 11 Award for his significant contribution to 
space science and technology. Dr. Speer is an associate fellow of the American 
Institute of Aeronautics and Astronautics. He received an MA and PhD in physics 
from the Technical University in Berlin. A native of Germany, he became a U.S. 
citizen on November 2, 1960. 
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GEORGE W. JEFFS has been president of North American 
Aerospace Operations and acting president of the Space 
Transportation and Systems Group since 1978. He has led the 
development, design, engineering, and construction of the 
Space Shuttle orbiter and has directed the integration of the 
Space Shuttle vehicle. In April of 1976, he was given the 
additional responsibility for the major launch vehicle propul¬ 
sion engines, advanced space engines, solid rockets, water-jet 
engines, and laser programs at Rockwell's Rocketdyne 
Division. Previously, he was Space Division president, responsi¬ 
ble for the Space Shuttle program and the Navstar Global 
Positioning System. While serving as Space Division vice president and Apollo program 
manager, Mr. Jeffs directed nine Apollo lunar missions, three Skylab missions, and the 
joint U.S.A.-U.S.S.R. Apollo-Soyuz test project. Mr. Jeffs is a member of the National 
Academy of Engineering and has received NASA's Distinguished Service medal for his 
contributions to the space program. He has received numerous other NASA awards and 
presidential and congressional commendations. He is a fellow of both the American 
Institute of Aeronautics and Astronautics and the American Astronomical Society. He 
is also a recipient of the National Management Association's Golden Knight of 
Management Mr. Jeffs received a BS in aeronautical engineering from the University of 
Washington in 1945 and an MS in aeronautical engineering in 1947. 


DR. ROCCO PETRONE is executive vice president of the 
Space Transportation and Systems Group. He provides 
Rockwell's technical expertise and leadership for engineering, 
design, fabrication and test requirements for the space vehicle 
systems. Prior to joining Rockwell in 1981, he was chairman 
and chief executive officer of the National Center for Resource 
Recovery since 1975. Petrone, a graduate of the United States 
Military Academy, was instrumental in development of rocket 
propulsion as the U.S. Army's Development officer at the 
Redstone Missile Department from 1952 through 1955. After 
four years as a member of the Army General staff. Dr. Petrone 
was assigned in 1960 to NASA's Kennedy Space Center as manager, Apollo program. 
In 1966 he was named director of Launch Operations for the Apollo flights through 
the first two lunar landings. He was then named director of the Apollo program. In 
1973, Dr. Petrone was named director of the Marshall Space Flight Center, Huntsville, 
AL (which is on the site of Redstone Arsenal), and in 1974 he was named NASA's 
associate administrator until he resigned from NASA in 1975. Dr. Petrone whose 
achievements in meeting NASA's technological goals are recorded in "Who's Who 
of Space." 


RICHARD SCHWARTZ is vice president and general manager 
of the Space Transportation and Systems Group Shuttle 
Orbiter Division. He is responsible for the orbiter development, 
production and space vehicle systems. Prior to this he was 
executive vice president of space vehicle systems. From 1974 
to 1979, he served as vice president and program manager of 
the Navstar Global Positioning System at the Space Division. In 
1973, he was appointed vice president and program manager of 
Space Systems and Applications, responsible for division 
efforts on advanced programs ranging from manned and 

unmanned spacecraft projects and studies to work in the 

insulation and energy fields. Before this, Schwartz was the chief engineer and program 
vice president for the Saturn S-ll in charge of design, development, and evaluation of 

the S-ll stages. He also played a key role in the application technique and repair of 

both honeycomb and spray-on foam insulation. During the Apollo program, he was 
involved wit integration testing of the early J-2 engines and was instrumental in the 
design of the S-ll pogo suppression system. He later participated with NASA in 
analyzing alternative Space Shuttle configurations to reduce pogo effects. 

WILLIAM C. STRATHERN is vice president and general 
manager of the Space Transportation and Systems Group, 
Space Operations/Integration and Satellite Systems Division. 
He is responsible for the System and Cargo Integration and 

Space Operations for the transition of the Space Transporta¬ 

tion System into an operational mode. This includes the 
responsibility of Rockwell Launch Operations at Kennedy 
Space Center and Vandenberg Air Force Base. Prior to this he 
was vice president of Business Development and Strategic 
Planning at Rockwell's Aerospace Operations. Before that, he 
was executive vice president of Rockwell's Space Systems 
Group. Strathern has held numerous executive positions with Rockwell in the more 
than 25 years he has been with the company. In 1973, he was President of Program 
Management and Marketing of the Government Telecommunications Division of 
Rockwell in Dallas, Texas; and in 1977, he was Vice President and General Manager of 
the Collins Government Avionics Division in Cedar Rapids, Iowa. Strathern joined the 
Collins Division in 1955 following Air Force service during the Korean War, in which 
he was an electronics instructor at airborne and ground communications and navigation 
schools. First, he was an avionics field service engineer on Strategic Air Command 
programs and was later named Manager of Field Operations. In 1961, he was appointed 
Sales Manager for Government Marketing in Washington, D.C. Later, he became 
Director of Government Field Representation, responsible for all Rockwell Collins 
field representatives assigned to government projects. In 1968, Strathern was appointed 
Vice President of Government Sales and in 1972 was named Vice President of 
Government Operations in Washington, D.C. Strathern holds membership in the 
Institute of Electrical and Electronics Engineers, the National Contract Management 
Association, and the Radio Club of America. He belongs to the Air Force Association, 
the Association of the U.S. Army, the National Aviation Cluft, and the American 
Marketing Association. 
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EDWARD SMITH is vice president of the Space Transportation 
and Systems Group Engineering. He is responsible for the 
technical excellence of engineering throughout the Divisions. 
Prior to this, he was vice president of the orbiter development 
and production, responsible for the engineering of the orbiter 
vehicles, since June 1977. From 1976 to 1977, he was Space 
Shuttle orbiter vice president and program manager. From 
April 1974 to 1976, he was vice president of Engineering, 
serving as Space Shuttle chief engineer responsible for division 
wide engineering. He was Shuttle chief engineer from 1972 to 
1974. With the company for more than 20 years. Smith came 
to the Space Division in 1966 as a senior project engineer on the Apollo programme 
was named Apollo chief engineer in 1970. He received the NASA Public Service Award 
and the Certificate of Appreciation for his contributions to the Apollo program. Smith 
graduated from UCLA with a BS in mechanical engineering. 


SEYMOUR (SY) RUBENSTEIN is vice president and program 
manager of the Space Transportation and Systems Group, 
Shuttle Orbiter Division, Orbiter Development. He is responsi¬ 
ble for the orbiter development and production. Prior to this, 
he was vice president and deputy program manager. He became 
vice president of engineering and chief engineer in 1977 after 
serving as associate chief program engineer for Space Shuttle 
avionics. Rubenstein transferred to the division from 
Rockwell's Autonetics Group in 1973 as director of Shuttle 
Avionics Systems. He received a BS in electrical engineering 
from the Massachusetts Institute of Technology and an MS in 
electrical engineering from New York University. He received an MBA from California 
State University at Fullerton. Rubenstein joined the Autonetics Division in 1961. In 
1966 he joined the Strike Avionics Systems of Autonetics where he became chief of 
Digital Systems and later chief of Guidance Navigation Control. In 1970, he was named 
program manager for Information Systems of the company's NARISCO group. 
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ROLAND L. BENNER is vice president of the Space 
Transportation and Systems Group, Space Operations/ 
Integration and Satellite Systems Division. He is responsible for 
Shuttle Integration and Payload/Cargo Integration and Space 
Operations, which includes Rockwell Launch Operations at the 
Kennedy Space Center and Vandenberg Air Force Base. Prior 
to this, he was director of Space Shuttle Systems Integration. 
He was assistant chief engineer for Space Shuttle Program 
Engineering from 1972 to 1973. Before that, Benner held the 
positions of assistant chief engineer, assitant program manager 
(spacecraft manager), and chief program engineer on Apollo. 
Benner also served as assistant project engineer and project engineer on the X-14 
program. He received his BS in 1949 from Villanova University, Philadelphia, PA. 


ALVIN L. REESER is general manager. Launch Operations at 
Kennedy Space Center for the Space Transportation and 
Systems Group, Space Operations/Integration and Satellite 
Systems Division. He is responsible for prelaunch and 
postlaunch activities and Space Shuttle preparations during test 
and operational flights. Prior to this, he was deputy manager 
for Launch Operations at the Kennedy Space Center. From 
1979 to 1980, he was program director for Space Operations 
and Satellite Systems Division. Between 1977 and 1979, 
Reeser was manager of Test Operations at the National Space 
Technology Laboratories (NSTL), MS. Reeser holds a degree 
in mechanical engineering from the University of Arizona and an M.S. degree in 
Systems Management from the University of Southern California. He joined the 
company in 1976. 
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ALBERT C. MARTIN is assistant general manager, Launch 
operations at Kennedy Space Center for the Space Trans¬ 
portation and Systems Group, Space Operations/Integration 
and Satellite Systems Division. Prior to this, he was chief 
engineer for the Space Transportation and Systems Group, 
Shuttle Orbiter Division development engineering. In this 
position, he was responsible for directing the engineering 
activities of the orbiter design, development, test, and 
evaluation phase. He was chief engineer for Space Shuttle 
Integration from 1978 to 1980. Previously, he served as chief 
project engineer for Space Shuttle Integration from 1972 to 
1978. During the Apollo lunar landing program, Martin was director of S-ll Launch 
Operations at KSC, where he received the NASA Public Service Award. In 1971, he 
returned to California and became chief engineer of Rockwell's Planetary Programs. 
Martin joined Rockwell in 1951 as a test engineer following graduation from the 
University of Texas, where he received both BS and MS degrees in aeronautical 
engineering. 



ROY H. BEAT is program director, Material for the Space 
Transportation and Systems Group, Shuttle Orbiter Division. 
He is responsible for all activities necessary to procure, store, 
and control all material required to produce an end product 
within cost and schedule limitations. Prior to this he was 
division director of Material and Subcontract Management in 
addition to director of Material, manager of Contracts/Pricing 
for Finance and Administration, director of Business Opera¬ 
tions, manager of Contracts/Pricing on the Space Shuttle 
program, director of Business Management, director of Central 
Procurement, and director of Shuttle Major Subcontract 
Management. Beat attended both 1 the University of Detroit and the University of 
Wichita. He is also a member of the National Mangement Association and the 
Purchasing Management Association. 
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DANIEL R. BROWN is program director. Manufacturing and 
Test, for the Space Transportation and Systems Group, Shuttle 
Orbiter Division. He is responsible for production operations, 
test, and checkout of the spacecraft, and related facilities at 
Downey and Palmdale, as well as related traffic transportation 
activities, since 1975. He has held key roles in building 
spacecraft, missiles, and aircraft. Brown joined Rockwell in 
1969 as director of Manufacturing Operations and Test. 
Previously, he was with Martin-Marietta Corporation, where he 
was a quality control engineer, system propulsion engineer, 
general supervisor of Manufacturing Installation and Checkout, 
and chief of Program and Production Control. During his service with Martin-Marietta, 
Brown held manufacturing assignments in Denver, CO, Orlando, FL, Vandenberg AFB, 
CA, and Little Rock, AR. 


ROBERT G. MINOR is chief engineer. Space Transportation 
and Systems Group, Shuttle Orbiter Division, engineering 
development. Previously, he was the assistant chief engineer. 
Space Transportation and Systems Group, engineering systems 
verification, a position he held since 1980. He has held various 
positions during his 18 years in the company and developed an 
extensive technical and management background in avionics 
and project engineering. Minor has received the NASA Medal 
for Exceptional Engineering Achievement. He holds a Bachelor 
of Science degree in electrical engineering from Southern 
Methodist University and has done graduate work at UCLA. He 
is a member of the American Institute of Electrical Engineering. 
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BRUCE A. GERSTNER is chief engineer of Space 
Transportation System Operations and Integration 
Engineering, Space Transportation and Systems Group, Space 
Operations/Integration and Satellite Systems Division. He is 
responsible for the Shuttle Integration and Payload/Cargo 
Integration and Space Operations, including the responsibility 
for Rockwell Launch Operations at the Kennedy Space Center 
and Vandenberg Air Force Base. Prior to this, he was chief 
program engineer responsible for the administration of system 
integration contracts in engineering. Previously, he was chief 
project engineer of Integration and project manager in System 
Engineering. He attended the College of the City University of New York, where he 
received a BS degree in mechanical engineering in 1948. 



DONALD H. CARTER is program director. Material, for the 
Space Transportation and Systems Group, Space 
Operations/Integration and Satellite Systems Division. He is 
responsible for managing all material activities for the Space 
Operations/Integration and Satellite Systems Division. Carter 
previously held key positions in material functions involving 
the Apollo and Space Shuttle programs. Carter attended 
UCLA, where he received a BA degree in accounting. 


RAY F. LARSON is chief engineer. Production Engineering for 
the Space Transportation and Systems Group, Shuttle Orbiter 
Division. He is responsible for directing the design and 
supporting the fabrication of Increment 3 production orbiter 
vehicles, including the planning, organization, and integration 
of engineering activities. Larson served as vice president of 
Satellite Systems Advanced Programs from 1979 to 1980 and 
as vice president of Space Advanced Programs from 1976 to 
1978. He was vice president and program engineer on the 
ASTP Command Service Module program from 1974 to 1976 
after serving more than four years as the division's vice 
president for Assurance Management. Larson joined Space Division in 1954 and 
worked on missile programs and study projects until being assigned to the Apollo 
program in 1962. He later became an Apollo assistant program manager, responsible 
for management of division work on the spacecraft for the Apollo 9, 12, 13, 14, and 
15 missions. He received the NASA Public Service Award in 1975 for his work on the 
ASTP program. He also serves as a consultant and chairman of the Subcommittee on 
Space Systems, NASA Space Systems Technology Advisory Committee, and as a 
consultant to the National Academy of Sciences on the Naval Studies Board Space 
Panel. Larson attended Wayne State College, NB, and earned a BS degree at the U.S. 
Naval Academy. He also took engineering courses at USC and did postgraduate work at 
the California Institute of Technology. 




HAROLD (HAL) E. EMIGH is division director. Business 
Development for the Space Transportation and Systems 
Group, Shuttle Orbiter Division. He is responsible for the 
Shuttle Orbiter business segment. Prior to this, he was program 
director of the payload and cargo integration business segment. 
He joined Rockwell in 1958 and has served as project manager 
for the Paraglider program and as project manager for 
Advanced Reentry/Recovery Systems. A graduate of Northrop 
University with a BS degree in aeronautical engineering, Emigh 
served twice with the U.S. Navy in communications during 
World War II and the Korean conflict. 
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DANIEL H. JENSEN is Orbiter 099 manager for the Space 
Transportation and Systems Group, Shuttle Orbiter Division, 
responsible for the production and delivery of spacecraft. In 
addition, he interfaces with the NASA flight operations 
functions for STS-1 through STS-4. He was named to this 
position in November 1979. Previously, he was director of 
Mated Vertical Ground Vibration Test Operations. He also 
served as director of the Approach and Landing Test program. 
Jensen joined Rockwell in 1962 as a senior test project 
engineer. Since then, he was spacecraft manager at Rockwell's 
Launch Operations, FL, for the Apollo lurtar landing flights 
and manager of Acceptance Test and Checkout on the Skylab and Apollo-Soyuz Test 
Project spacecraft. Jensen has received NASA achievement awards for his contributions 
to the Apollo and Skylab programs. He has a BS degree in aerodynamics from the 
University of Michigan. 



PAUL A. BARKER is Director Material for the Space 
Transportation and Systems Group, Space Operations/ 
Integration and Satellite Systems Division. He is responsible for 
the direction of Material Procurement. This includes all 
purchases required to be made except for major subcontracts. 
He has held this position since 1974. Prior to this position, he 
held the positions of Manager, General Supervisor, Supervisor, 
and Subcontract Administrator. Prior to joining Rockwell 
International, he was assistant project manager at Pratt and 
Whitney Aircraft and subcontractor administrator at 
Raytheon. 
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